CVE-2026-64589: i2c: core: fix NULL-deref on adapter registration failure
In the Linux kernel, the following vulnerability has been resolved:
i2c: core: fix NULL-deref on adapter registration failure
If adapter registration ever fails the release callback would trigger a NULL-pointer dereference as the completion struct has not been initialised.
Note that before the offending commit this would instead have resulted in a minor memory leak of the adapter name.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64589?
CVE-2026-64589 has a risk severity score of 12.
How do I fix CVE-2026-64589?
To fix CVE-2026-64589, update to the latest Linux kernel version where this vulnerability has been addressed.
What types of systems are affected by CVE-2026-64589?
CVE-2026-64589 affects systems running the specified versions of the Linux kernel that utilize i2c adapters.
What impact does CVE-2026-64589 have if exploited?
Exploiting CVE-2026-64589 could lead to a NULL-pointer dereference, causing system crashes or instability.
When was CVE-2026-64589 published?
CVE-2026-64589 was published on August 6, 2026.