CVE-2026-74271 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: power: supply: core: fix supplied_from allocations If dts property power-supplies has multiple values, then accessing to psy->supplied_from[i-1] in __power_supply_populate_supplied_from will overrun supplied_from array.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Kernel

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/14357ba006e1586e4b4e809c074b21baf0aa4c4b
https://git.kernel.org/stable/c/23a29ee1d9de38b7d6226b27653bc736b28ff05a
https://git.kernel.org/stable/c/ae55e4bf18ee0c4c170797dd65e17dbdf644fcf2
https://git.kernel.org/stable/c/ba61aed9a34671222d1149acfc2f0179a9ce7e80
https://git.kernel.org/stable/c/d0503357653ee62188987a26baa2d7f3689f367e
https://git.kernel.org/stable/c/fefc9dad30d545be288d50a0b10d00465015fcfe

History

Sat, 15 Aug 2026 06:15:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: power: supply: core: fix supplied_from allocations If dts property power-supplies has multiple values, then accessing to psy->supplied_from[i-1] in __power_supply_populate_supplied_from will overrun supplied_from array.
Title		power: supply: core: fix supplied_from allocations
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/14357ba006e1586e4b4e809c074b21baf0aa4c4b https://git.kernel.org/stable/c/23a29ee1d9de38b7d6226b27653bc736b28ff05a https://git.kernel.org/stable/c/ae55e4bf18ee0c4c170797dd65e17dbdf644fcf2 https://git.kernel.org/stable/c/ba61aed9a34671222d1149acfc2f0179a9ce7e80 https://git.kernel.org/stable/c/d0503357653ee62188987a26baa2d7f3689f367e https://git.kernel.org/stable/c/fefc9dad30d545be288d50a0b10d00465015fcfe

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-15T05:57:44.853Z

Updated: 2026-08-15T05:57:44.853Z

Reserved: 2026-08-15T05:44:03.879Z

Link: CVE-2026-74271

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-15T06:22:26.497

Modified: 2026-08-15T06:22:26.497

Link: CVE-2026-74271

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-74271", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-15T05:44:03.879Z", "datePublished": "2026-08-15T05:57:44.853Z", "dateUpdated": "2026-08-15T05:57:44.853Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-15T05:57:44.853Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: core: fix supplied_from allocations\n\nIf dts property power-supplies has multiple values, then accessing to\npsy->supplied_from[i-1] in __power_supply_populate_supplied_from will\noverrun supplied_from array."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/power/supply/power_supply_core.c"], "versions": [{"version": "f6e0b081fb300a4601b064346963cf6bb163f437", "lessThan": "ae55e4bf18ee0c4c170797dd65e17dbdf644fcf2", "status": "affected", "versionType": "git"}, {"version": "f6e0b081fb300a4601b064346963cf6bb163f437", "lessThan": "23a29ee1d9de38b7d6226b27653bc736b28ff05a", "status": "affected", "versionType": "git"}, {"version": "f6e0b081fb300a4601b064346963cf6bb163f437", "lessThan": "fefc9dad30d545be288d50a0b10d00465015fcfe", "status": "affected", "versionType": "git"}, {"version": "f6e0b081fb300a4601b064346963cf6bb163f437", "lessThan": "d0503357653ee62188987a26baa2d7f3689f367e", "status": "affected", "versionType": "git"}, {"version": "f6e0b081fb300a4601b064346963cf6bb163f437", "lessThan": "14357ba006e1586e4b4e809c074b21baf0aa4c4b", "status": "affected", "versionType": "git"}, {"version": "f6e0b081fb300a4601b064346963cf6bb163f437", "lessThan": "ba61aed9a34671222d1149acfc2f0179a9ce7e80", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/power/supply/power_supply_core.c"], "versions": [{"version": "3.10", "status": "affected"}, {"version": "0", "lessThan": "3.10", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.178", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.145", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.97", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.40", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.5", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2-rc1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.10", "versionEndExcluding": "6.1.178"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.10", "versionEndExcluding": "6.6.145"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.10", "versionEndExcluding": "6.12.97"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.10", "versionEndExcluding": "6.18.40"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.10", "versionEndExcluding": "7.1.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.10", "versionEndExcluding": "7.2-rc1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/ae55e4bf18ee0c4c170797dd65e17dbdf644fcf2"}, {"url": "https://git.kernel.org/stable/c/23a29ee1d9de38b7d6226b27653bc736b28ff05a"}, {"url": "https://git.kernel.org/stable/c/fefc9dad30d545be288d50a0b10d00465015fcfe"}, {"url": "https://git.kernel.org/stable/c/d0503357653ee62188987a26baa2d7f3689f367e"}, {"url": "https://git.kernel.org/stable/c/14357ba006e1586e4b4e809c074b21baf0aa4c4b"}, {"url": "https://git.kernel.org/stable/c/ba61aed9a34671222d1149acfc2f0179a9ce7e80"}], "title": "power: supply: core: fix supplied_from allocations", "x_generator": {"engine": "bippy-1.2.0"}}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/power/supply/power_supply_core.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "ae55e4bf18ee0c4c170797dd65e17dbdf644fcf2", "status": "affected", "version": "f6e0b081fb300a4601b064346963cf6bb163f437", "versionType": "git"}, {"lessThan": "23a29ee1d9de38b7d6226b27653bc736b28ff05a", "status": "affected", "version": "f6e0b081fb300a4601b064346963cf6bb163f437", "versionType": "git"}, {"lessThan": "fefc9dad30d545be288d50a0b10d00465015fcfe", "status": "affected", "version": "f6e0b081fb300a4601b064346963cf6bb163f437", "versionType": "git"}, {"lessThan": "d0503357653ee62188987a26baa2d7f3689f367e", "status": "affected", "version": "f6e0b081fb300a4601b064346963cf6bb163f437", "versionType": "git"}, {"lessThan": "14357ba006e1586e4b4e809c074b21baf0aa4c4b", "status": "affected", "version": "f6e0b081fb300a4601b064346963cf6bb163f437", "versionType": "git"}, {"lessThan": "ba61aed9a34671222d1149acfc2f0179a9ce7e80", "status": "affected", "version": "f6e0b081fb300a4601b064346963cf6bb163f437", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/power/supply/power_supply_core.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "3.10"}, {"lessThan": "3.10", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.178", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.145", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.97", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.40", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2-rc1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: core: fix supplied_from allocations\n\nIf dts property power-supplies has multiple values, then accessing to\npsy->supplied_from[i-1] in __power_supply_populate_supplied_from will\noverrun supplied_from array."}], "id": "CVE-2026-74271", "lastModified": "2026-08-15T06:22:26.497", "metrics": {}, "published": "2026-08-15T06:22:26.497", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/14357ba006e1586e4b4e809c074b21baf0aa4c4b"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/23a29ee1d9de38b7d6226b27653bc736b28ff05a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/ae55e4bf18ee0c4c170797dd65e17dbdf644fcf2"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/ba61aed9a34671222d1149acfc2f0179a9ce7e80"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/d0503357653ee62188987a26baa2d7f3689f367e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/fefc9dad30d545be288d50a0b10d00465015fcfe"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}