The Linux kernel's max17040 power supply driver had a flaw where register read errors from I2C transfers were ignored by max17040_get_vcell() and max17040_get_soc(). This caused uninitialized register values to be interpreted as valid data, potentially misleading userspace applications with incorrect voltage or state of charge readings. Additionally, the polling worker could overwrite cached state with invalid data and trigger false change events. The fix involves propagating read errors through the power supply get_property callback and preserving the last valid cached state when polling encounters failures.

Incorrect voltage or state of charge data could be reported to userspace, potentially causing misinterpretation of device power status. Spurious change events may also be emitted, which could affect power management or monitoring systems relying on accurate data. There is no indication of direct security compromise or exploitation in the wild.

A fix has been implemented in the Linux kernel to propagate register read errors properly and maintain the last valid cached state when polling fails. Users should update to the fixed kernel version once available. Patch status is not explicitly stated in the provided data; check the official Linux kernel advisories or vendor sources for the exact fixed versions and update guidance.