Linux Kernel Vulnerability in i2c_imx Runtime Power Management

CVE-2026-53340

What is CVE-2026-53340?

In the Linux kernel's i2c subsystem, a flaw was identified where the clock is disabled prior to setting the pinctrl state to sleep during runtime power management. If the transition to the sleep state fails, the clock remains disabled, potentially leading to a system crash upon any subsequent hardware access. To address this issue, the process has been adjusted to ensure that the pinctrl state is set before the clock is disabled. Additionally, should the clock enable process fail, the system will revert the pinctrl state to maintain operational consistency and system stability.

References