CVE-2026-64279: i2c: core: fix adapter deregistration race
i2c: core: fix adapter deregistration race
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.145.2-1 - Compensating control
Remove the I2C adapter from the IDR before tearing it down during deregistration and on registration failure, ensuring lookups such as i2c_get_adapter() cannot access it after it has been freed.
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
Exploitation requires local access and low privileges; no user interaction is required. The issue affects systems where I2C adapters can be looked up while an adapter is being deregistered or registration is failing.
Which software is identified as affected?
The affected software list includes the Linux kernel and Microsoft azl3 kernel 6.6.144.1-1. The provided data does not identify whether any particular default I2C configuration is affected.
What is the remediation?
Apply the available patch. The fix removes an adapter from the IDR before teardown or registration-failure cleanup, preventing lookups from accessing resources that have already been freed.