PT-2026-61646 · Linux+1 · Linux Kernel+1

CVE-2026-64205

·

Published

2026-06-23

·

Updated

2026-09-07

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A hardware state machine corruption exists in the i2c-i801 driver. The issue occurs within the error handling path of the i801 access() function. When the i801 check pre() function fails, the system executes an unconditional hardware register cleanup via iowrite8(), which clears the INUSE STS lock and resets status flags without having acquired hardware ownership. This action interrupts BIOS/ACPI transactions and corrupts the SMBus hardware state machine. This leads to a console livelock where a flood of error logs monopolizes the CPU, preventing other processes from acquiring the mmap lock down read semaphore and eventually triggering a hung task panic.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

AZL-92858
BDU:2026-14308
CVE-2026-64205
OPENSUSE-SU-2026:11476-1
USN-8726-1
USN-8727-1
USN-8728-1

Affected Products

Linux Kernel
Ubuntu