CVE-2026-64205

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> i2c: i801: fix hardware state machine corruption in error path<br /> <br /> A severe livelock and subsequent Hung Task panic were observed in the<br /> i2c-i801 driver during concurrent Fuzzing. The crash is caused by an<br /> unconditional hardware register cleanup in the error handling path of<br /> i801_access().<br /> <br /> When i801_check_pre() fails (e.g., returning -EBUSY because the SMBus<br /> controller is actively used by BIOS/ACPI), the kernel does not actually<br /> acquire the hardware ownership. However, the code jumps to the &amp;#39;out&amp;#39;<br /> label and executes:<br /> <br /> iowrite8(SMBHSTSTS_INUSE_STS | STATUS_FLAGS, SMBHSTSTS(priv));<br /> <br /> This forcefully clears the INUSE_STS lock and resets the hardware status<br /> flags without owning the controller. Doing so interrupts ongoing BIOS/ACPI<br /> transactions and totally corrupts the SMBus hardware state machine.<br /> <br /> Consequently, all subsequent i801_access() calls fail at the pre-check<br /> stage, triggering an endless stream of "SMBus is busy, can&amp;#39;t use it!"<br /> error logs. Over a slow serial console, this printk flood monopolizes<br /> the CPU (Console Livelock), starving other processes trying to acquire<br /> the mmap_lock down_read semaphore, ultimately triggering the hung task<br /> watchdog.<br /> <br /> Fix this by moving the &amp;#39;out&amp;#39; label below the hardware register cleanup.<br /> If i801_check_pre() fails, we safely bypass the iowrite8() and only<br /> release the software locks (pm_runtime and mutex), strictly adhering to<br /> the rule of not releasing resources that were never acquired.