CVE-2026-74271

power: supply: core: fix supplied_from allocations

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Aug 17, 2026
Reserved: Aug 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

power: supply: core: fix supplied_from allocations

If dts property power-supplies has multiple values, then accessing to psy->supplied_from[i-1] in __power_supply_populate_supplied_from will overrun supplied_from array.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	f6e0b081fb300a4601b064346963cf6bb163f437 to before ae55e4bf18ee0c4c170797dd65e17dbdf644fcf2Affected f6e0b081fb300a4601b064346963cf6bb163f437 to before 23a29ee1d9de38b7d6226b27653bc736b28ff05aAffected f6e0b081fb300a4601b064346963cf6bb163f437 to before fefc9dad30d545be288d50a0b10d00465015fcfeAffected f6e0b081fb300a4601b064346963cf6bb163f437 to before d0503357653ee62188987a26baa2d7f3689f367eAffected f6e0b081fb300a4601b064346963cf6bb163f437 to before 14357ba006e1586e4b4e809c074b21baf0aa4c4bAffected f6e0b081fb300a4601b064346963cf6bb163f437 to before ba61aed9a34671222d1149acfc2f0179a9ce7e80Affected
LinuxLinux	3.10Affected before 3.10Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

f6e0b081fb300a4601b064346963cf6bb163f437 to before ae55e4bf18ee0c4c170797dd65e17dbdf644fcf2Affected
f6e0b081fb300a4601b064346963cf6bb163f437 to before 23a29ee1d9de38b7d6226b27653bc736b28ff05aAffected
f6e0b081fb300a4601b064346963cf6bb163f437 to before fefc9dad30d545be288d50a0b10d00465015fcfeAffected
f6e0b081fb300a4601b064346963cf6bb163f437 to before d0503357653ee62188987a26baa2d7f3689f367eAffected
f6e0b081fb300a4601b064346963cf6bb163f437 to before 14357ba006e1586e4b4e809c074b21baf0aa4c4bAffected
f6e0b081fb300a4601b064346963cf6bb163f437 to before ba61aed9a34671222d1149acfc2f0179a9ce7e80Affected

LinuxLinux

3.10Affected
before 3.10Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.