I2C Driver Vulnerability in Synopsys DesignWare Leading to Function Malfunction

CVE-2026-10683

What is CVE-2026-10683?

The Synopsys DesignWare I2C driver contains a vulnerability in its target/slave mode that results in persistent CMD_SEND states, leading to prolonged malfunction of I2C target functions. If a STOP interrupt is lost or a specific write sequence is repeated, the system may fail to invoke the necessary write callbacks. This situation results in a denial of service, impacting the ability of the target peripheral to recover unless a reset is performed. The issue is rectified by adjusting the interrupt mask to include the START_DET, ensuring proper state resets on every bus restart.

References