CVE-2026-53400

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists during the registration of I2C adapters. The i2c get adapter() function allows looking up adapters by ID and takes a reference to the embedded struct device. If an adapter is added to the IDR (Integer ID Management system) before it is fully initialized, it may lead to the access of uninitialized data, potentially resulting in NULL-pointer dereferences or use-after-free scenarios. This is particularly relevant for the i2c-dev character device, which relies on i2c get adapter() via a bus notifier.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.