CVE-2026-53400
Received Received - Intake

Race Condition in Linux Kernel I2C Core

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter registration race Adapters can be looked up based on their id using i2c_get_adapter() which takes a reference to the embedded struct device. Make sure that the adapter (including its struct device) has been initialised before adding it to the IDR to avoid accessing uninitialised data which could, for example, lead to NULL-pointer dereferences or use-after-free. Note that the i2c-dev chardev, which is registered from a bus notifier, currently uses i2c_get_adapter() so the adapter needs to be added to the IDR before registration.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
CVE-2026-53400
EUVD
EUVD-2026-45455

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a race condition during adapter registration in the I2C subsystem. It occurs when an adapter is added to the IDR before its embedded struct device is fully initialized, potentially leading to NULL-pointer dereferences or use-after-free issues.

Detection Guidance

This vulnerability is specific to the Linux kernel's I2C subsystem and does not have direct network detection methods. To check if your system is affected, verify the kernel version and whether the fix for CVE-2026-53400 is applied. Use commands like 'uname -r' to check the kernel version and 'dmesg' or 'journalctl' to look for I2C-related errors or crashes.

Impact Analysis

This vulnerability could cause system instability or crashes due to memory corruption issues like NULL-pointer dereferences or use-after-free errors. It may affect systems using I2C devices, potentially leading to data corruption or denial of service.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it is a low-level kernel issue involving a race condition in I2C adapter registration. It could lead to system instability or crashes but does not inherently impact data protection or privacy requirements.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for CVE-2026-53400. This can typically be done via your distribution's package manager (e.g., 'apt upgrade', 'yum update', or 'dnf upgrade'). Reboot the system after applying the update to ensure the new kernel is active.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-53400. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart