{"id":"CVE-2026-89461","title":"kernel: power: supply: max17040: synchronize work cancellation on suspend (CVE-2026-89461)","summary":"A flaw was found in the Linux kernel's `max17040` power supply driver. A timing issue, known as a race condition, can occur during system suspend. This allows a background process (polling callback) to continue accessing the fuel gauge and…","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvssSource":"vendor","cwe":"CWE-821","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","affected":["openshift_container_platform 4"],"published":"2026-09-11","updated":"2026-09-17","sourceUpdated":"2026-09-17T19:52:25+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89461.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89461.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-89461"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2532186"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-89461"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89461"},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89461.mbox"},{"url":"https://git.kernel.org/stable/c/36e6ce0f402f965328b27fd31ac793110e8a0c39"},{"url":"https://git.kernel.org/stable/c/5a863417fb9a1034ab1cfe4fa0de46ce1f95f3ec"},{"url":"https://git.kernel.org/stable/c/86a3a8a926aa5969c329d1df2d3259f189961bbc"},{"url":"https://git.kernel.org/stable/c/aad7247bd35ad44af90a5e8974cdff614235b497"},{"url":"https://git.kernel.org/stable/c/6bd453e328a0325f838c3bf64d4609c6c1866ed7"},{"url":"https://git.kernel.org/stable/c/7a9ec6707b545b2a0b35942c8b68d975cb901f77"},{"url":"https://git.kernel.org/stable/c/dc946222e4b5bdb4e92bc3a5a5e8fc4ddac34ec0"},{"url":"https://git.kernel.org/stable/c/23783db5642a714f0547c5b5b0c9cdbb1be7b084"}],"tags":["csaf","vex","red-hat","cve.org"],"epss":0.0021,"epssPercentile":0.11531,"ingestedAt":"2026-09-14T15:23:07.453Z","slug":"CVE-2026-89461","body":"## Overview\n\nA flaw was found in the Linux kernel's `max17040` power supply driver. A timing issue, known as a race condition, can occur during system suspend. This allows a background process (polling callback) to continue accessing the fuel gauge and restart itself even after the system suspend has finished. This could lead to unexpected system behavior or resource management problems.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · updated 2026-09-17 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89461.json)\n\n**kernel: power: supply: max17040: synchronize work cancellation on suspend** — rated Moderate by Red Hat. Released 2026-09-11, updated 2026-09-17.\n\nNot affected:\n\n- Red Hat Enterprise Linux 10\n- Red Hat Enterprise Linux 6\n- Red Hat Enterprise Linux 7\n- Red Hat Enterprise Linux 8\n- Red Hat Enterprise Linux 9\n- Red Hat OpenShift Container Platform 4\n\n## Remediation\n\nRefer to the advisory for fix availability.","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":204069,"id":"CVE-2026-89461","ts":1789490231297,"field":"cvss","old":null,"new":"5.5"},{"seq":204068,"id":"CVE-2026-89461","ts":1789490231297,"field":"severity","old":"none","new":"medium"},{"seq":147620,"id":"CVE-2026-89461","ts":1789270211625,"field":"cvss","old":null,"new":"5.5"},{"seq":147619,"id":"CVE-2026-89461","ts":1789270211625,"field":"severity","old":"none","new":"medium"},{"seq":109372,"id":"CVE-2026-89461","ts":1789183731652,"field":"cvss","old":null,"new":"5.5"},{"seq":109371,"id":"CVE-2026-89461","ts":1789183731652,"field":"severity","old":"none","new":"medium"}]}