CVE-2026-74463

A flaw was found in the Linux kernel's i2c: jz4780 driver. A severe deadlock can occur between the Common Clock Framework CCF and the I2C adapter lock. This happens when an I2C-controlled clock generator client is registered or modified, and a concurrent I2C transfer attempts to acquire a lock...

CVE-2026-74462

A flaw was found in the Linux kernel's i.MX I2C driver. During system suspend and resume, a time window exists where I2C controller resources may be disabled or not yet restored. If a workqueue triggers an I2C transfer during this period, the driver attempts to access unavailable hardware...

CVE-2026-74547

A flaw was found in the Linux kernel's hwmon adt7470 component. A local user can exploit this by configuring the 'autoupdateinterval' to zero via sysfs while 'numtempsensors' is also set to zero. This combination forces the background thread into an unbounded busy-loop, consuming CPU resources an...

CVE-2026-74461

A flaw was found in the Linux kernel, specifically within the i2c: imx driver. This vulnerability occurs due to a timing issue during device unregistration, where a critical pointer is cleared before a related timer is properly canceled. If a pending interrupt triggers the timer after the pointer...

CVE-2026-72141

A flaw was found in the Linux kernel's i2c-imx driver. A malicious device on the I2C bus or a local attacker with access to the I2C bus could exploit this vulnerability by initiating an SMBus block-read operation with a zero byte count. This can cause the I2C bus to become locked, requiring a pow...

CVE-2026-72142

A flaw was found in the i2c-imx driver of the Linux kernel. When an I2C slave device performs an SMBus block-read operation with a byte count of zero, the atomic polling path in the driver fails to properly release the I2C bus. This can cause the bus to become stuck, requiring a power cycle of th...

Linux Distros Unpatched Vulnerability : CVE-2026-72140

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: mlxbf: Fix use-after-free in mlxbfi2cinitresource If devmplatformgetandioremapresource returns an error, mlxbfi2cinitresource frees tmpres before reading...

Linux Distros Unpatched Vulnerability : CVE-2026-72141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: imx: fix locked bus on SMBus block-read of 0 IRQ SMBus 3.1 6.5.7 allows a Block Read byte count of 0, but the interrupt-driven block-read state machine...

Linux Distros Unpatched Vulnerability : CVE-2026-72479

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: accel: mma8452: handle I2C read errors in mma8452read Currently, If i2csmbusreadi2cblockdata fails but mma8452setruntimepmstate succeeds, mma8452read retur...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: Drop the lock in skbmaytxtimestamp CVE-2026-43216 In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: strictly check for maximum number of actions CVE-2026-43329 In the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100774)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100774 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Clamp HDMI HDCP2 rxidlist read to buffer size Why & How During HDCP 2.x repeater...

The vulnerability of the tw9906probe() function in the i2c/tw9906.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the tw9906probe function in the i2c/tw9906.c component of the Linux operating system’s kernel is related to improper memory release before deleting the last pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099957)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099957 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Clamp HDMI HDCP2 rxidlist read to buffer size Why & How During HDCP 2.x repeater...

SUSE CVE-2026-74461

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: Cancel hrtimer before clearing slave pointer In i2cimxunregslave, the slave pointer is set to NULL after disabling interrupts. However, a pending interrupt might already have started the hrtimer i2cimxslavetimeout befor...

SUSE CVE-2026-74462

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: mark I2C adapter when hardware is powered down On some i.MX platforms, certain I2C client drivers keep a periodic workqueue which continues to trigger I2C transfers. During system suspend/resume, there exists a time...

SUSE CVE-2026-74547

In the Linux kernel, the following vulnerability has been resolved: hwmon: adt7470 Fix busy-loop and I2C flooding in update thread When userspace configures 'autoupdateinterval' to 0 via sysfs, the background kthread executes scheduletimeoutinterruptible0, which returns immediately. If...

UBUNTU-CVE-2026-74547

In the Linux kernel, the following vulnerability has been resolved: hwmon: adt7470 Fix busy-loop and I2C flooding in update thread When userspace configures 'autoupdateinterval' to 0 via sysfs, the background kthread executes scheduletimeoutinterruptible0, which returns immediately. If...

CVE-2026-74547

In the Linux kernel, the following vulnerability has been resolved: hwmon: adt7470 Fix busy-loop and I2C flooding in update thread When userspace configures 'autoupdateinterval' to 0 via sysfs, the background kthread executes scheduletimeoutinterruptible0, which returns immediately. If...

CVE-2026-74462

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: mark I2C adapter when hardware is powered down On some i.MX platforms, certain I2C client drivers keep a periodic workqueue which continues to trigger I2C transfers. During system suspend/resume, there exists a time...

CVE-2026-74463

In the Linux kernel, the following vulnerability has been resolved: i2c: jz4780: Cache host clock rate at probe to prevent CCF preparelock deadlock Fix a severe AB/BA deadlock between the Common Clock Framework CCF and the I2C adapter lock, which triggers when an I2C-controlled clock generator...