CVE-2026-64589
Received Received - Intake

NULL-pointer dereference in Linux kernel i2c core

Vulnerability report for CVE-2026-64589, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-06

Last updated on: 2026-08-06

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix NULL-deref on adapter registration failure If adapter registration ever fails the release callback would trigger a NULL-pointer dereference as the completion struct has not been initialised. Note that before the offending commit this would instead have resulted in a minor memory leak of the adapter name.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-06
Last Modified
2026-08-06
Generated
2026-08-06
AI Q&A
2026-08-06
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel occurs when an I2C adapter registration fails. The system attempts to call a release function that dereferences a NULL pointer because a completion structure was not initialized. Before the fix, this would have caused a minor memory leak of the adapter name instead.

Detection Guidance

This vulnerability involves a NULL-pointer dereference during i2c adapter registration failure in the Linux kernel. Detection requires checking kernel logs for i2c-related errors or crashes during adapter registration. No specific commands are provided in the context.

Impact Analysis

If exploited, this could lead to a system crash due to a NULL-pointer dereference when adapter registration fails. It may cause kernel instability or denial of service in affected systems.

Mitigation Strategies

Apply the latest Linux kernel updates to resolve this issue. Monitor kernel logs for i2c adapter registration failures. Ensure proper error handling in i2c driver code if you are developing or maintaining such drivers.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64589. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart