CVE-2026-64279: i2c: core: fix adapter deregistration race
Published Jul 25, 2026
·Updated
i2c: core: fix adapter deregistration race
Affected Software
8 affected componentsFixes available
Linux Linux kernel
Microsoft azl3 kernel 6.6.144.1-1<6.6.145.2-1
6.6.145.2-1
Linux Linux kernel>=2.6.31<5.15.212
Linux Linux kernel>=5.16<6.1.178
Linux Linux kernel>=6.2<6.6.145
Linux Linux kernel>=6.7<6.12.96
Linux Linux kernel>=6.13<6.18.39
Linux Linux kernel>=6.19<7.1.4
Remediation
Event History
Jul 25, 2026
CVE Published
via MITRE·08:49 AM
Data Sourced
via MITRE·08:49 AM
DescriptionSeverity
Data Sourced
via NVD·10:17 AM
RemedyDescriptionSeverityWeaknessAffected Software
Jul 26, 2026
Data Sourced
via Microsoft·08:08 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·08:08 AM
DescriptionSeverity
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
Exploitation requires local access and low privileges; no user interaction is required. The issue affects systems where I2C adapters can be looked up while an adapter is being deregistered or registration is failing.
2
Which software is identified as affected?
The affected software list includes the Linux kernel and Microsoft azl3 kernel 6.6.144.1-1. The provided data does not identify whether any particular default I2C configuration is affected.
3
What is the remediation?
Apply the available patch. The fix removes an adapter from the IDR before teardown or registration-failure cleanup, preventing lookups from accessing resources that have already been freed.