CVE-2026-80953

Received Received - Intake

Race Condition in Linux Kernel I3C Master ADI Driver

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: i3c: master: adi: initialize the lock before enabling interrupts adi_i3c_master_probe() requests the IRQ and unmasks REG_IRQ_PENDING_CMDR before the controller's IBI state, transfer queue list and transfer queue lock are initialized. A pending CMDR interrupt can therefore run adi_i3c_master_irq() and take master->xferqueue.lock before the dynamic lock has been initialized. This issue was found by our static analysis tool and then manually reviewed against the current tree. The grounded PoC kept the probe ordering and the IRQ path adi_i3c_master_probe() -> adi_i3c_master_irq() -> xferqueue.lock, with a pending CMDR interrupt arriving after REG_IRQ_PENDING_CMDR is unmasked. Lockdep reported: INFO: trying to register non-static key. you didn't initialize this object before use? lock_acquire+0xbb/0x290 _raw_spin_lock_irqsave+0x36/0x60 adi_i3c_master_irq+0x32/0x56 [vuln_msv] adi_i3c_master_probe+0x5a/0xf47 [vuln_msv] Initialize the transfer queue and IBI state before requesting and unmasking the IRQ.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-11

Last Modified

2026-09-11

Generated

2026-09-12

AI Q&A

2026-09-12

EPSS Evaluated

N/A

NVD

CVE-2026-80953

EUVD

EUVD-2026-76276

Affected Vendors & Products

Vendor	Product	Version / Range
adi	i3c	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a race condition in the I3C master driver for Analog Devices hardware. The issue occurs when the adi_i3c_master_probe function requests an IRQ and unmasks an interrupt before initializing critical components like the transfer queue lock. This can lead to a deadlock or system crash if an interrupt arrives before the lock is properly set up.

Detection Guidance

This vulnerability is specific to the Linux kernel's I3C master driver for ADI devices. Detection requires checking kernel logs for lock-related errors during I3C device initialization. Look for messages like 'lock_acquire' or 'didn't initialize this object before use' in dmesg output. No network-specific detection commands are applicable.

Impact Analysis

This vulnerability could cause system instability, crashes, or deadlocks on affected Linux systems using the I3C master driver for Analog Devices hardware. It may lead to kernel panics or require a reboot to recover, potentially disrupting services or causing data loss.

Mitigation Strategies

Apply the kernel patch that initializes the transfer queue and IBI state before requesting IRQs. Update to a kernel version containing the fix. If immediate patching isn't possible, disable the affected I3C ADI master driver module until patched.

Hi! I’m here to help you understand CVE-2026-80953. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70