SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-89462

UNKNOWN · CVSS N/A EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of power supply readings from the MAX17040 sensor, where errors during I2C transfers are ignored, leading to the reporting of uninitialized values as valid voltage or state of charge. This can result in incorrect power management decisions and spurious change events, potentially impacting system stability and reliability. Organizations using Linux systems that rely on the MAX17040 for power management should prioritize addressing this issue to ensure accurate readings and prevent erroneous system behavior.

CVE
CVE-2026-89462
Severity
UNKNOWN
CVSS
N/A
EPSS
0.17%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: propagate register read errors max17040_get_vcell() and max17040_get_soc() ignore errors returned by regmap_read(). When an I2C transfer fails, the uninitialized register value is converted and reported to userspace as a valid voltage or state of charge. The polling worker can also replace the cached state of charge with the bogus value and emit a spurious change event. Propagate read errors through the power supply get_property callback and keep the last valid cached state of charge when polling fails.