CVE-2026-53400
Gravedad CVSS v3.1:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
19/07/2026
Última modificación:
20/07/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
i2c: core: fix adapter registration race<br />
<br />
Adapters can be looked up based on their id using i2c_get_adapter()<br />
which takes a reference to the embedded struct device.<br />
<br />
Make sure that the adapter (including its struct device) has been<br />
initialised before adding it to the IDR to avoid accessing uninitialised<br />
data which could, for example, lead to NULL-pointer dereferences or<br />
use-after-free.<br />
<br />
Note that the i2c-dev chardev, which is registered from a bus notifier,<br />
currently uses i2c_get_adapter() so the adapter needs to be added to the<br />
IDR before registration.
Impacto
Puntuación base 3.x
7.80
Gravedad 3.x
ALTA