CVE-2026-23197
Severity
5.5MEDIUM
EPSS
0.0%
top 96.16%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 14
Description
In the Linux kernel, the following vulnerability has been resolved:
i2c: imx: preserve error state in block data length handler
When a block read returns an invalid length, zero or >I2C_SMBUS_BLOCK_MAX,
the length handler sets the state to IMX_I2C_STATE_FAILED. However,
i2c_imx_master_isr() unconditionally overwrites this with
IMX_I2C_STATE_READ_CONTINUE, causing an endless read loop that overruns
buffers and crashes the system.
Guard the state transition to preserve error states set by the l…
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages3 packages
▶CVEListV5linux/linux5f5c2d4579ca6836f5604cca979debd68ecfe23f — 3f9b508b3eecc00a243edf320bd83834d6a9b482+2
Patches
🔴Vulnerability Details
3OSV▶
CVE-2026-23197: In the Linux kernel, the following vulnerability has been resolved: i2c: imx: preserve error state in block data length handler When a block read retu↗2026-02-14
GHSA▶
GHSA-hp2v-w3xq-4jvv: In the Linux kernel, the following vulnerability has been resolved:
i2c: imx: preserve error state in block data length handler
When a block read re↗2026-02-14