CVE-2026-14986

An out-of-bounds write in the ITE it51xxx I2C driver in Zephyr RTOS (drivers/i2c/i2c_ite_it51xxx.c) occurs when the driver operates as an I2C target in buffer mode. The FIFO interrupt handler target_i2c_isr_fifo() copies host-supplied data into a fixed 256-byte buffer but performs its bounds chec...

CVE-2026-14986 Out-of-bounds write in it51xxx I2C target FIFO ISR on oversized write transaction

The ITE it51xxx I2C driver, when operating as an I2C target slave in buffer mode CONFIGI2CTARGET + CONFIGI2CTARGETBUFFERMODE, copies host-supplied write data into the fixed-size data-targetinbuffer inside its target FIFO interrupt handler targeti2cisrfifo in drivers/i2c/i2citeit51xxx.c. The copy...

The vulnerability of the stub_xfer() function in the drivers/i2c/i2c-stub.c file of the Linux I2C driver kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the stubxfer function in the drivers/i2c/i2c-stub.c file of the Linux I2C driver kernel relates to the issue of operations going beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

The vulnerability of the i2cdev_ioctl() function in the drivers/i2c/i2c-dev.c file of the I2C driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the i2cdevioctl function in the drivers/i2c/i2c-dev.c file of the I2C driver in the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cciremove() function in the drivers/i2c/buses/i2c-qcom-cci.c module of the I2C hardware interface driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the cciremove function in the drivers/i2c/busses/i2c-qcom-cci.c module of the I2C hardware interface driver for the Linux operating system is related to the swapping of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-80680

A flaw was found in the Linux kernel's i2c: amd-mp2 driver. During the registration of an I2C adapter, the driver may store a memory address pointer that later becomes invalid if the adapter registration fails. This can lead to the driver attempting to access this invalid memory location a "stale...

UBUNTU-CVE-2026-80680

In the Linux kernel, the following vulnerability has been resolved: i2c: amd-mp2: Unregister callback on adapter add failure amdmp2registercb stores the platform I2C context in the MP2 PCI driver's callback table before the adapter is registered. If i2caddadapter fails, probe returns and devres...

CVE-2026-80680

In the Linux kernel, the following vulnerability has been resolved: i2c: amd-mp2: Unregister callback on adapter add failure amdmp2registercb stores the platform I2C context in the MP2 PCI driver's callback table before the adapter is registered. If i2caddadapter fails, probe returns and devres...

The vulnerability of the mctp_i2c_recv() function in the drivers/net/mctp/mctp-i2c.c module of the MCTP serial transport driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mctpi2crecv function in the drivers/net/mctp/mctp-i2c.c module of the MCTP serial transport driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability may allow a remote attacker to cause service interruptions...

The vulnerability of the i2c_imx_master_isr() function in the drivers/i2c/busses/i2c-imx.c module of the I2C driver for the Linux operating system’s hardware bus allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the i2cimxmasterisr function in the drivers/i2c/busses/i2c-imx.c module of the I2C driver for the Linux operating system is related to the use of a pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...

The vulnerability of the i2c_s3cirq_nextbyte() function in the drivers/i2c/busses/i2c-s3c2410.c file of the I2C driver for the Linux operating system’s hardware layer allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the i2cs3cirqnextbyte function in the driver/i2c/busses/i2c-s3c2410.c file of the I2C hardware layer of the Linux operating system is related to the issue of writing operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromis...

CVE-2026-74733

In the Linux kernel, the following vulnerability has been resolved: gpio: pca953x: fix pca953xirqbussyncunlock regmap lock Locking is disabled in the regmap config as this driver uses its own lock. This means that all calls to regmap functions read or write must hold the i2clock. The function...

CVE-2026-74462

A flaw was found in the Linux kernel's i.MX I2C driver. During system suspend and resume, a time window exists where I2C controller resources may be disabled or not yet restored. If a workqueue triggers an I2C transfer during this period, the driver attempts to access unavailable hardware...

Linux Distros Unpatched Vulnerability : CVE-2026-72140

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: mlxbf: Fix use-after-free in mlxbfi2cinitresource If devmplatformgetandioremapresource returns an error, mlxbfi2cinitresource frees tmpres before reading...

The vulnerability of the tw9906probe() function in the i2c/tw9906.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the tw9906probe function in the i2c/tw9906.c component of the Linux operating system’s kernel is related to improper memory release before deleting the last pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE CVE-2026-74461

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: Cancel hrtimer before clearing slave pointer In i2cimxunregslave, the slave pointer is set to NULL after disabling interrupts. However, a pending interrupt might already have started the hrtimer i2cimxslavetimeout befor...

SUSE CVE-2026-74462

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: mark I2C adapter when hardware is powered down On some i.MX platforms, certain I2C client drivers keep a periodic workqueue which continues to trigger I2C transfers. During system suspend/resume, there exists a time...

CVE-2026-74462

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: mark I2C adapter when hardware is powered down On some i.MX platforms, certain I2C client drivers keep a periodic workqueue which continues to trigger I2C transfers. During system suspend/resume, there exists a time...

UBUNTU-CVE-2026-74462

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: mark I2C adapter when hardware is powered down On some i.MX platforms, certain I2C client drivers keep a periodic workqueue which continues to trigger I2C transfers. During system suspend/resume, there exists a time...

CVE-2026-74463

The CVE-2026-74463 issue concerns the Linux kernel: i2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock. The root cause is that during an I2C clock frequency change, the Common Clock Framework (CCF) can deadlock with the I2C adapter lock when clk_get_rate() is invoked...