CVE-2026-72142

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the i2c imx driver where the atomic polling path incorrectly rejects an SMBus block-read with a byte count of 0 as -EPROTO. This causes the system to return without sending a NACK+STOP, leading the target to hold the SDA line and locking the bus until the i2c controller is power cycled. Similarly, when reading I2DR, a byte count exceeding I2C SMBUS BLOCK MAX also results in a -EPROTO return without releasing the bus. The issue is resolved by NACKing the in-flight dummy byte via TXAK and extending msgs->len to ensure the last-byte handling emits a STOP signal.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.