Linux Kernel Vulnerability in I2C Core Adapter Registration

CVE-2026-64589

What is CVE-2026-64589?

A vulnerability within the Linux kernel's I2C core that arises during the adapter registration process could lead to a NULL-pointer dereference if the registration fails. This issue occurs because the completion structure associated with the adapter is not initialized correctly during a failure scenario. Previously, such a failure would only result in a minor memory leak of the adapter name, but the current oversight introduces a more severe risk of system instability via a crash. Addressing this flaw is critical to maintaining robust system performance and security.

References