---
id: CVE-2026-89461
title: >-
  kernel: power: supply: max17040: synchronize work cancellation on suspend
  (CVE-2026-89461)
summary: >-
  A flaw was found in the Linux kernel's `max17040` power supply driver. A
  timing issue, known as a race condition, can occur during system suspend. This
  allows a background process (polling callback) to continue accessing the fuel
  gauge and…
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cvssSource: vendor
cwe: CWE-821
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
affected:
  - openshift_container_platform 4
published: '2026-09-11'
updated: '2026-09-17'
sourceUpdated: '2026-09-17T19:52:25+00:00'
source: CSAF
sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89461.json'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89461.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-89461'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2532186'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-89461'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-89461'
  - url: >-
      https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89461.mbox
  - url: 'https://git.kernel.org/stable/c/36e6ce0f402f965328b27fd31ac793110e8a0c39'
  - url: 'https://git.kernel.org/stable/c/5a863417fb9a1034ab1cfe4fa0de46ce1f95f3ec'
  - url: 'https://git.kernel.org/stable/c/86a3a8a926aa5969c329d1df2d3259f189961bbc'
  - url: 'https://git.kernel.org/stable/c/aad7247bd35ad44af90a5e8974cdff614235b497'
  - url: 'https://git.kernel.org/stable/c/6bd453e328a0325f838c3bf64d4609c6c1866ed7'
  - url: 'https://git.kernel.org/stable/c/7a9ec6707b545b2a0b35942c8b68d975cb901f77'
  - url: 'https://git.kernel.org/stable/c/dc946222e4b5bdb4e92bc3a5a5e8fc4ddac34ec0'
  - url: 'https://git.kernel.org/stable/c/23783db5642a714f0547c5b5b0c9cdbb1be7b084'
tags:
  - csaf
  - vex
  - red-hat
  - cve.org
epss: 0.0021
epssPercentile: 0.11563
ingestedAt: '2026-09-14T15:23:07.453Z'
---

## Overview

A flaw was found in the Linux kernel's `max17040` power supply driver. A timing issue, known as a race condition, can occur during system suspend. This allows a background process (polling callback) to continue accessing the fuel gauge and restart itself even after the system suspend has finished. This could lead to unexpected system behavior or resource management problems.

## Vendor advisories

- **Red Hat VEX** · Moderate · updated 2026-09-17 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89461.json)

**kernel: power: supply: max17040: synchronize work cancellation on suspend** — rated Moderate by Red Hat. Released 2026-09-11, updated 2026-09-17.

Not affected:

- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat OpenShift Container Platform 4

## Remediation

Refer to the advisory for fix availability.