CVE-2026-80678

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition and error handling flaw exist in the i2c imx driver. In the i2c imx reg slave() function, the slave pointer is assigned before the pm runtime resume and get() function is called. If pm runtime resume and get() fails, the error path does not clear the i2c imx->slave variable, causing subsequent registration attempts to fail with an -EBUSY error. Furthermore, because the driver uses a shared IRQ, the i2c imx isr() interrupt handler can execute concurrently and dereference i2c imx->slave after acquiring the slave lock. A previous attempt to fix this by adding a lockless assignment of NULL to i2c imx->slave on the error path could still result in a NULL pointer dereference due to a race with the ISR under the lock.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.