CVE-2026-31549: i2c: cp2615: fix serial string NULL-deref at probe
i2c: cp2615: fix serial string NULL-deref at probe
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
Modify the cp2615 driver to verify that the USB device has a serial number before accessing the serial string or using it as the I2C adapter name, preventing a NULL-pointer dereference.
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems using the Linux kernel cp2615 I2C driver are exposed when they probe a CP2615 USB device whose serial string is absent. The issue can be triggered by malicious devices.
What access does an attacker need to exploit it?
The listed vector requires local access and low privileges, with no user interaction. An attacker needs a device condition that causes the cp2615 driver to access a missing USB serial string during probe.
What is the impact if exploitation succeeds?
The vulnerable driver can trigger a NULL-pointer dereference during device probe, resulting in an availability impact. The provided severity vector indicates no confidentiality or integrity impact.
What should be done if patching cannot happen immediately?
Avoid connecting untrusted or potentially malicious CP2615 USB devices to affected systems. Exposure is tied to probing devices that lack the expected serial string.