CVE-2026-64589

Summary

In the Linux kernel, the following vulnerability has been resolved:

i2c: core: fix NULL-deref on adapter registration failure

If adapter registration ever fails the release callback would trigger a NULL-pointer dereference as the completion struct has not been initialised.

Note that before the offending commit this would instead have resulted in a minor memory leak of the adapter name.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxe19f31169f85c712c9fca35bfd28ceb093a9f574 < 2ce0a74bfa3acdfcdb00cf02f181f2754b451f42affected
LinuxLinux3f8c4f5e9a57868fa107016c81165686d23325f2 < 3351c5e77749a0c8a1e252b95420c143ebcf07acaffected
LinuxLinux3f8c4f5e9a57868fa107016c81165686d23325f2 < 034e307428119b67f5f18a35e4f4e7d15a2b9774affected
LinuxLinux3f8c4f5e9a57868fa107016c81165686d23325f2 < 2295d2bb101faa663fbc45fadbb3fec45f107441affected
LinuxLinux6.12.11 < 6.12.96affected
LinuxLinux6.13affected
LinuxLinux0 < 6.13unaffected
LinuxLinux6.12.96 <= 6.12.*unaffected
LinuxLinux6.18.39 <= 6.18.*unaffected
LinuxLinux7.1.4 <= 7.1.*unaffected
LinuxLinux7.2-rc1 <= *unaffected

Weaknesses

References