Linux Kernel Vulnerability in AMD MP2 Driver Affecting I2C Adapter Registration

CVE-2026-80680

What is CVE-2026-80680?

A vulnerability exists in the Linux kernel within the AMD MP2 driver related to the I2C adapter registration process. During the initialization, if the adapter fails to register, the platform I2C context is incorrectly stored within the MP2 PCI driver's callback table. As a result, this can lead to a situation where the PCI driver attempts to dereference a stale pointer from its IRQ and system-sleep callbacks, leading to potential system instability or security risks. The solution involves unregistering the callback before returning any registration error to prevent the use of dangling pointers.

References