CVE-2026-74271: power: supply: core: fix supplied_from allocations

Published Aug 15, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

power: supply: core: fix suppliedfrom allocations

If dts property power-supplies has multiple values, then accessing to psy->suppliedfrom[i-1] in powersupplypopulatesuppliedfrom will overrun suppliedfrom array.

Event History

Aug 15, 2026

CVE Published

via MITRE·05:57 AM

Data Sourced

via MITRE·05:57 AM

Description

Frequently Asked Questions

What is the severity of CVE-2026-74271?

CVE-2026-74271 has a risk rating of 34, indicating a significant vulnerability in the Linux kernel.

How do I fix CVE-2026-74271?

To fix CVE-2026-74271, update to the latest patched version of the Linux kernel that includes the fix for the supplied_from allocations.

What systems are affected by CVE-2026-74271?

CVE-2026-74271 affects versions of the Linux kernel that implement power supply features with improper handling of multiple values in the power-supplies property.

What technical issue does CVE-2026-74271 address?

CVE-2026-74271 addresses a vulnerability where accessing psy->supplied_from[i-1] can lead to an out-of-bounds access in the context of power management.

When was CVE-2026-74271 published?

CVE-2026-74271 was published on August 15, 2026.

CVE-2026-74271: power: supply: core: fix supplied_from allocations

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2026-74271?

How do I fix CVE-2026-74271?

What systems are affected by CVE-2026-74271?

What technical issue does CVE-2026-74271 address?

When was CVE-2026-74271 published?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2026-74271?

How do I fix CVE-2026-74271?

What systems are affected by CVE-2026-74271?

What technical issue does CVE-2026-74271 address?

When was CVE-2026-74271 published?