power: supply: core: fix supplied_from allocations (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.21 % · percentile 12 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: power: supply: core: fix supplied_from allocations If dts property power-supplies has multiple values, then accessing to psy->supplied_from[i-1] in __power_supply_populate_supplied_from will overrun supplied_from array.
References
- https://git.kernel.org/stable/c/ae55e4bf18ee0c4c170797dd65e17dbdf644fcf2
- https://git.kernel.org/stable/c/23a29ee1d9de38b7d6226b27653bc736b28ff05a
- https://git.kernel.org/stable/c/fefc9dad30d545be288d50a0b10d00465015fcfe
- https://git.kernel.org/stable/c/d0503357653ee62188987a26baa2d7f3689f367e
- https://git.kernel.org/stable/c/14357ba006e1586e4b4e809c074b21baf0aa4c4b
- https://git.kernel.org/stable/c/ba61aed9a34671222d1149acfc2f0179a9ce7e80
European references
- ENISA EUVD · EUVD-2026-59418
- GCVE · GCVE-0-2026-74271
CERT-FR advisories
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1333 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1286 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1231 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected f6e0b081fb300a4601b064346963cf6bb163f437 < ae55e4bf18ee0c4c170797dd65e17dbdf644fcf2 ; affected f6e0b081fb300a4601b064346963cf6bb163f437 < 23a29ee1d9de38b7d6226b27653bc736b28ff05a ; affected f6e0b081fb300a4601b064346963cf6bb163f437 < fefc9dad30d545be288d50a0b10d00465015fcfe ; affected f6e0b081fb300a4601b064346963cf6bb163f437 < d0503357653ee62188987a26baa2d7f3689f367e ; affected f6e0b081fb300a4601b064346963cf6bb163f437 < 14357ba006e1586e4b4e809c074b21baf0aa4c4b ; affected f6e0b081fb300a4601b064346963cf6bb163f437 < ba61aed9a34671222d1149acfc2f0179a9ce7e80 |
| Linux · Linux | affected 3.10 ; unaffected 0 < 3.10 ; unaffected 6.1.178 ≤ 6.1.* ; unaffected 6.6.145 ≤ 6.6.* ; unaffected 6.12.97 ≤ 6.12.* ; unaffected 6.18.40 ≤ 6.18.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |