Linux Kernel Adapter Registration Vulnerability Impacting Various Systems

CVE-2026-53400

What is CVE-2026-53400?

A race condition vulnerability exists in the Linux kernel regarding adapter registration within the I2C subsystem. Specifically, the issue arises during the use of the i2c_get_adapter() function, which retrieves an I2C adapter based on its identifier. Inadequate initialization of the adapter can lead to scenarios where uninitialized data is accessed. This can cause significant operational problems, such as NULL-pointer dereferences or use-after-free situations. Proper handling of the adapter lifecycle is crucial to ensure system stability and security, particularly before registration processes such as i2c-dev chardev occur.

References