CVE-2026-74461

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free or NULL pointer dereference occurs in the i2c imx driver. In the i2c imx unreg slave() function, the slave pointer is set to NULL after interrupts are disabled. If a pending interrupt has already started the hrtimer (high-resolution timer) i2c imx slave timeout, the timer callback i2c imx slave finish op() may call i2c imx slave event() with a NULL slave pointer if the timer fires after the pointer is cleared.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.