CVE-2026-53400: i2c: core: fix adapter registration race
i2c: core: fix adapter registration race
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.145.2-1
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
Exploitation requires local access and low privileges; no user interaction is required. The CVSS vector indicates impacts to confidentiality, integrity, and availability within the same security scope.
Which kernel component is involved in the race?
The issue is in I2C adapter registration and lookup through i2c_get_adapter(). The i2c-dev character device is specifically relevant because it is registered from a bus notifier and uses i2c_get_adapter().
What should be done if systems may be affected?
Apply a kernel update containing the resolved I2C core registration-race fix. The provided references identify stable-kernel commits for the fix, but no affected or fixed version ranges are provided.