In the Linux kernel, the following vulnerability has been resolved:

power: supply: max17040: propagate register read errors

max17040 get vcell() and max17040 get soc() ignore errors returned by regmap read(). When an I2C transfer fails, the uninitialized register value is converted and reported to userspace as a valid voltage or state of charge. The polling worker can also replace the cached state of charge with the bogus value and emit a spurious change event.

Propagate read errors through the power supply get property callback and keep the last valid cached state of charge when polling fails.