CVE-2026-72454

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the i3c hci addr to dev() function within the MIPI I3C HCI component. The function traverses bus->devs.i3c, which is protected by bus.lock (a read-write semaphore). However, because the function is called from the MIPI I3C HCI IRQ handler, it cannot acquire bus.lock. This allows the I3C core to modify the device list during concurrent device addition or removal while the list is being traversed, which can lead to crashes or use-after-free scenarios.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.