CVE-2026-80711 - Vulnerability Details

- power: supply: max17040: handle missing status supplier

Description

In the Linux kernel, the following vulnerability has been resolved:

power: supply: max17040: handle missing status supplier

MAX17040 does not report charger state itself, so the driver forwards
POWER_SUPPLY_PROP_STATUS to a supplier power supply. If no supplier is
registered, power_supply_get_property_from_supplier() returns -ENODEV and
leaves the output value untouched.

max17040_get_property() currently ignores that error and returns success,
so userspace can read an uninitialized status value from the battery power
supply. This happens on systems that use the fuel gauge without a charger
supplier relationship in firmware.

Return POWER_SUPPLY_STATUS_UNKNOWN when no supplier provides STATUS, and
propagate other supplier lookup errors.

Published: 2026-08-28

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

The kernel driver for the MAX17040 fuel gauge forwards the POWER_SUPPLY_PROP_STATUS property to a supplier power supply. When no supplier is registered, the lookup fails and the driver mistakenly treats the failure as success, resulting in userspace reading an uninitialized status value. This can cause the device to report the battery status as unknown or erroneous, confusing battery management systems without exposing code execution or privilege escalation.

Affected Systems

Linux kernel users that operate the MAX17040 fuel gauge driver, particularly those without a configured charger state supplier in their firmware. No specific kernel version range is listed in the available data, so any production kernel that includes this driver without the patch is potentially affected.

Risk and Exploitability

The vulnerability has a CVSS score of 5.5, indicating moderate severity. The EPSS score is <1%, implying a very low exploitation probability, and it is not listed in CISA KEV. The flaw does not allow an attacker to execute code or exfiltrate data; it only causes userspace to read an uninitialized value, limiting the risk to misreported battery status and potential inconvenience in power management operations.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`f4b782af61ae7bbf93008d5809b0e3a8ac2bb88e`	affected	< 91ac995a6f4ddf4f92b231b080544abf23a9b871
`f4b782af61ae7bbf93008d5809b0e3a8ac2bb88e`	affected	< b039f13e095d28a64ca6b21d0ee5440d8b048f37
`f4b782af61ae7bbf93008d5809b0e3a8ac2bb88e`	affected	< ee2ea0c452edc0930e7395b080dccd5a1cb965e1
`f4b782af61ae7bbf93008d5809b0e3a8ac2bb88e`	affected	< 725668c6b6aa3971fe850659102c250d0d676e18

Linux

affected

Version	Status	Constraints
`6.7`	affected	—
`0`	unaffected	< 6.7
`6.12.103`	unaffected	≤ 6.12.*
`6.18.44`	unaffected	≤ 6.18.*
`7.1.8`	unaffected	≤ 7.1.*
`7.2`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[f4b782af61ae7bbf93008d5809b0e3a8ac2bb88e,91ac995a6f4ddf4f92b231b080544abf23a9b871)`	affected	code_commit	—
`[f4b782af61ae7bbf93008d5809b0e3a8ac2bb88e,b039f13e095d28a64ca6b21d0ee5440d8b048f37)`	affected	code_commit	—
`[f4b782af61ae7bbf93008d5809b0e3a8ac2bb88e,ee2ea0c452edc0930e7395b080dccd5a1cb965e1)`	affected	code_commit	—
`[f4b782af61ae7bbf93008d5809b0e3a8ac2bb88e,725668c6b6aa3971fe850659102c250d0d676e18)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`6.7`	affected	generic	—
`[0,6.7)`	unaffected	generic	—
`[6.12.103,6.13.0]`	unaffected	semver	—
`[6.18.44,6.19.0]`	unaffected	semver	—
`[7.1.8,7.2.0]`	unaffected	semver	—
`[7.2,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

Apply a kernel update that includes the patch to the MAX17040 driver, ensuring the status lookup correctly propagates errors and returns POWER_SUPPLY_STATUS_UNKNOWN when no supplier is present.
Configure the firmware or hardware to provide a proper power supply supplier that supplies status information, or modify the driver configuration to disable status forwarding when a supplier is absent.
If an immediate kernel update is not feasible, monitor battery status logs for anomalous or zero values and consider disabling the MAX17040 status reporting on affected devices until a proper fix is applied.

Generated by OpenCVE AI on August 31, 2026 at 15:56 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00156.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/725668c6b6aa3971fe850659102c250d0d676e18
https://git.kernel.org/stable/c/91ac995a6f4ddf4f92b231b080544abf23a9b871
https://git.kernel.org/stable/c/b039f13e095d28a64ca6b21d0ee5440d8b048f37
https://git.kernel.org/stable/c/ee2ea0c452edc0930e7395b080dccd5a1cb965e1
https://lore.kernel.org/linux-cve-announce/2026082808-CVE-2026-80711-67c8@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-80711
https://www.cve.org/CVERecord?id=CVE-2026-80711

History

Mon, 31 Aug 2026 14:15:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-758

Mon, 31 Aug 2026 12:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-908
References		https://lore.kernel.org/linux-cve-announce/2026082808-CVE-2026-80711-67c8@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-80711 https://www.cve.org/CVERecord?id=CVE-2026-80711
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Moderate`

Fri, 28 Aug 2026 17:45:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-758

Fri, 28 Aug 2026 14:15:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-788

Fri, 28 Aug 2026 10:45:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-788

Fri, 28 Aug 2026 07:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: handle missing status supplier MAX17040 does not report charger state itself, so the driver forwards POWER_SUPPLY_PROP_STATUS to a supplier power supply. If no supplier is registered, power_supply_get_property_from_supplier() returns -ENODEV and leaves the output value untouched. max17040_get_property() currently ignores that error and returns success, so userspace can read an uninitialized status value from the battery power supply. This happens on systems that use the fuel gauge without a charger supplier relationship in firmware. Return POWER_SUPPLY_STATUS_UNKNOWN when no supplier provides STATUS, and propagate other supplier lookup errors.
Title		power: supply: max17040: handle missing status supplier
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/725668c6b6aa3971fe850659102c250d0d676e18 https://git.kernel.org/stable/c/91ac995a6f4ddf4f92b231b080544abf23a9b871 https://git.kernel.org/stable/c/b039f13e095d28a64ca6b21d0ee5440d8b048f37 https://git.kernel.org/stable/c/ee2ea0c452edc0930e7395b080dccd5a1cb965e1

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-28T06:53:10.631Z

Updated: 2026-08-28T06:53:10.631Z

Reserved: 2026-08-26T14:34:25.788Z

Link: CVE-2026-80711

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-28T08:16:56.740

Modified: 2026-08-28T08:16:56.740

Link: CVE-2026-80711

Redhat

Severity : Moderate

Publid Date: 2026-08-28T00:00:00Z

Links: CVE-2026-80711 - Bugzilla

OpenCVE Enrichment

Updated: 2026-08-31T16:00:06Z

Weaknesses

CWE-908
Use of Uninitialized Resource

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object