CVE-2026-89462
Last modified
CVE-2026-89462 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: propagate register read errors max17040_get_vcell() and max17040_get_soc() ignore errors returned by regmap_read(). When an I2C transfer fails, the uninitialized register value is converted and reported to userspace as a valid voltage or state of charge.
Description
In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: propagate register read errors max17040_get_vcell() and max17040_get_soc() ignore errors returned by regmap_read(). When an I2C transfer fails, the uninitialized register value is converted and reported to userspace as a valid voltage or state of charge. The polling worker can also replace the cached state of charge with the bogus value and emit a spurious change event. Propagate read errors through the power supply get_property callback and keep the last valid cached state of charge when polling fails.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= c6f4a42de60b981dd210de01cd3e575835e3158e, < 2943a0edd4865ed744702ada647921c3981207f6; >= c6f4a42de60b981dd210de01cd3e575835e3158e, < 13fb0477da9b400071b9d518b24d6434c4965263; >= c6f4a42de60b981dd210de01cd3e575835e3158e, < c7aa4c3708cc0d8487336f8281665eaea87130f6; >= c6f4a42de60b981dd210de01cd3e575835e3158e, < 659cc3d8d5ef246263873fce72c8cadeeed073cc |
| Linux | Linux | 2.6.31 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-89462?
How severe is CVE-2026-89462?
How do I fix CVE-2026-89462?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-89457In the Linux kernel, the following vulnerability has been re…
- CVE-2026-89458In the Linux kernel, the following vulnerability has been re…
- CVE-2026-89459In the Linux kernel, the following vulnerability has been re…7
- CVE-2026-8946Incorrect boundary conditions in the Audio/Video: Web Codecs…7.5
- CVE-2026-89460In the Linux kernel, the following vulnerability has been re…
- CVE-2026-89461In the Linux kernel, the following vulnerability has been re…
- CVE-2026-89463In the Linux kernel, the following vulnerability has been re…
- CVE-2026-89464In the Linux kernel, the following vulnerability has been re…
- CVE-2026-89465In the Linux kernel, the following vulnerability has been re…8.4
- CVE-2026-89466In the Linux kernel, the following vulnerability has been re…7.7
- CVE-2026-89467In the Linux kernel, the following vulnerability has been re…
- CVE-2026-89468In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-89462?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST