65 matches found
AZL-101520 CVE-2026-89983 affecting package kernel for versions less than 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix debugfs UAF on adapter removal i2cdeladapter frees the adapter's debugfs directory before it unregisters the adapter device, but the newdevice sysfs attribute stays writable until devicedel. A write racing with...
CVE-2026-89983
In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix debugfs UAF on adapter removal i2cdeladapter frees the adapter's debugfs directory before it unregisters the adapter device, but the newdevice sysfs attribute stays writable until devicedel. A write racing with...
CVE-2026-89983
CVE-2026-89983 is a use-after-free vulnerability in the Linux kernel I2C core subsystem. The root cause is a race condition: i2c_del_adapter() frees the adapter's debugfs directory before the adapter device is fully unregistered, while the new_device sysfs attribute remains writable until device_...
CVE-2026-89983 i2c: core: fix debugfs UAF on adapter removal
In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix debugfs UAF on adapter removal i2cdeladapter frees the adapter's debugfs directory before it unregisters the adapter device, but the newdevice sysfs attribute stays writable until devicedel. A write racing with...
EUVD-2026-80583
In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix debugfs UAF on adapter removal i2cdeladapter frees the adapter's debugfs directory before it unregisters the adapter device, but the newdevice sysfs attribute stays writable until devicedel. A write racing with...
PT-2026-93624
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue exists in the i2c core during adapter removal. The i2c del adapter function frees the adapter's debugfs directory before the adapter device is unregistered...
CVE-2026-89983: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix debugfs UAF on adapter removal i2cdeladapter frees the adapter's debugfs directory before it unregisters the adapter device, but the newdevice sysfs attribute stays writable until devicedel. A write racing with...
Linux Distros Unpatched Vulnerability : CVE-2026-89983
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: core: fix debugfs UAF on adapter removal i2cdeladapter frees the adapter's debugfs directory before it unregisters the adapter device, but the newdevice...
Astra Linux – Vulnerability in Linux 5.10, Linux
In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix array-index-out-of-bounds in pvr2i2ccoreinit Syzbot reported that -1 is used as an array index. The problem lay in the lack of a validation check. The value of hdw-unitnumber is initialized with -1. If the...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: i2c: core: Perform atomic i2c transfers when !preemptible is set. Since bae1d3a05a8b, i2c transfers are not atomic if preemption is disabled. However, non-atomic i2c transfers require preemption e.g., during waitforcompletion, wh...
K000163196: Linux kernel vulnerability CVE-2026-53400
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter registration race Adapters can be looked up based on their id using i2cgetadapter which takes a reference to the embedded struct device. Make sure that the adapter including it...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098927)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098927 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter deregistration race Adapters can be looked up by their id using...
CVE-2026-64589
In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix NULL-deref on adapter registration failure If adapter registration ever fails the release callback would trigger a NULL-pointer dereference as the completion struct has not been initialised. Note that before the...
CVE-2026-64589 i2c: core: fix NULL-deref on adapter registration failure
In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix NULL-deref on adapter registration failure If adapter registration ever fails the release callback would trigger a NULL-pointer dereference as the completion struct has not been initialised. Note that before the...
CVE-2026-64589
CVE-2026-64589 affects the Linux kernel i2c core. The issue arises when adapter registration fails: the release callback can dereference a NULL pointer because the completion struct is not initialised, potentially leading to a crash. Prior to the offending commit this would have caused a minor me...
CVE-2026-64589
In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix NULL-deref on adapter registration failure If adapter registration ever fails the release callback would trigger a NULL-pointer dereference as the completion struct has not been initialised. Note that before the...
CVE-2026-64589 i2c: core: fix NULL-deref on adapter registration failure
In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix NULL-deref on adapter registration failure If adapter registration ever fails the release callback would trigger a NULL-pointer dereference as the completion struct has not been initialised. Note that before the...
Linux Distros Unpatched Vulnerability : CVE-2026-64589
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix NULL-deref on adapter registration failure If adapter registration ever fails...
CVE-2026-64589
In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix NULL-deref on adapter registration failure If adapter registration ever fails the release callback would trigger a NULL-pointer dereference as the completion struct has not been initialised. Note that before the...
PT-2026-68422
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL-pointer dereference occurs in the i2c core during adapter registration failure. If the registration process fails, the release callback is triggered while the completion struct...