CVE-2026-23197: i2c: imx: preserve error state in block data length handler
In the Linux kernel, the following vulnerability has been resolved:
i2c: imx: preserve error state in block data length handler
When a block read returns an invalid length, zero or >I2CSMBUSBLOCKMAX, the length handler sets the state to IMXI2CSTATEFAILED. However, i2cimxmasterisr() unconditionally overwrites this with IMXI2CSTATEREADCONTINUE, causing an endless read loop that overruns buffers and crashes the system.
Guard the state transition to preserve error states set by the length handler.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23197?
CVE-2026-23197 has been classified as a moderate severity vulnerability due to its potential impact on system stability.
How do I fix CVE-2026-23197?
To fix CVE-2026-23197, you should update to the latest version of the Linux kernel that includes the patch for this vulnerability.
What specific component is affected by CVE-2026-23197?
CVE-2026-23197 specifically affects the i2c subsystem in the Linux kernel.
Is CVE-2026-23197 exploitable remotely?
CVE-2026-23197 is not considered to be remotely exploitable as it requires local access to the affected system.
What could happen if CVE-2026-23197 is not addressed?
If CVE-2026-23197 is not addressed, it may lead to system crashes or unexpected behavior during block read operations.