CVE-2026-53400
published 2026-07-19CVE-2026-53400: In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter registration race Adapters can be looked up based on their id using…
PriorityP340high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.10%
1.0th percentile
In the Linux kernel, the following vulnerability has been resolved:
i2c: core: fix adapter registration race
Adapters can be looked up based on their id using i2c_get_adapter()
which takes a reference to the embedded struct device.
Make sure that the adapter (including its struct device) has been
initialised before adding it to the IDR to avoid accessing uninitialised
data which could, for example, lead to NULL-pointer dereferences or
use-after-free.
Note that the i2c-dev chardev, which is registered from a bus notifier,
currently uses i2c_get_adapter() so the adapter needs to be added to the
IDR before registration.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| linux | linux | — | — |
| linux | linux | >= 6e13e641841833cc2aa5baefe89bb04bc388801b < 2e57c788e71f1763445f812eba4e0b4a2fbd0646 | 2e57c788e71f1763445f812eba4e0b4a2fbd0646 |
| linux | linux | >= 6e13e641841833cc2aa5baefe89bb04bc388801b < a4365bc41baaf67f3a5aa8556d23544e6ec7480a | a4365bc41baaf67f3a5aa8556d23544e6ec7480a |
| linux | linux | >= 6e13e641841833cc2aa5baefe89bb04bc388801b < 1febb174815bcae56d73587e99e8f87e02f0784d | 1febb174815bcae56d73587e99e8f87e02f0784d |
| linux | linux | >= 6e13e641841833cc2aa5baefe89bb04bc388801b < da9d8d9711f78deebc202d0cffcf577e45ee8621 | da9d8d9711f78deebc202d0cffcf577e45ee8621 |
| linux | linux | >= 6e13e641841833cc2aa5baefe89bb04bc388801b < 78793c75dc6d0ff2e4d50ad617349b328a99054e | 78793c75dc6d0ff2e4d50ad617349b328a99054e |
| linux | linux | >= 6e13e641841833cc2aa5baefe89bb04bc388801b < 6a946038f2a5a8c29048c6af369d4e391448a5c5 | 6a946038f2a5a8c29048c6af369d4e391448a5c5 |
| linux | linux | >= 6e13e641841833cc2aa5baefe89bb04bc388801b < a4c8094bbf4c6fa68b17e3b16f6a0a1b7a14f3e0 | a4c8094bbf4c6fa68b17e3b16f6a0a1b7a14f3e0 |
| linux | linux | >= 6e13e641841833cc2aa5baefe89bb04bc388801b < ba14d7cf2fe7284610a29854bdff22b2537d3ce6 | ba14d7cf2fe7284610a29854bdff22b2537d3ce6 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 2.6.22 < 5.10.261 | 5.10.261 |
| linux | linux_kernel | >= 5.11 < 5.15.212 | 5.15.212 |
| linux | linux_kernel | >= 5.16 < 6.1.178 | 6.1.178 |
| linux | linux_kernel | >= 6.13 < 6.18.38 | 6.18.38 |
| linux | linux_kernel | >= 6.19 < 7.1.3 | 7.1.3 |
| linux | linux_kernel | >= 6.2 < 6.6.145 | 6.6.145 |
| linux | linux_kernel | >= 6.7 < 6.12.95 | 6.12.95 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter registration race Adapters can be looked up based on their id using i2c_get_adapter() which takes a referen
ghsa_unreviewed·2026-07-19
CVE-2026-53400 [HIGH] In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter registration race Adapters can be looked up based on their id using i2c_get_adapter() which takes a referen
In the Linux kernel, the following vulnerability has been resolved:
i2c: core: fix adapter registration race
Adapters can be looked up based on their id using i2c_get_adapter()
which takes a reference to the embedded struct device.
Make sure that the adapter (including its struct device) has been
initialised before adding it to the IDR to avoid accessing uninitialised
data which could, for example, lead to NULL-pointer dereferences or
use-after-free.
Note that the i2c-dev chardev, which is registered from a bus notifier,
currently uses i2c_get_adapter() so the adapter needs to be added to the
IDR before registration.
Red Hat
kernel: i2c: core: fix adapter registration race
vendor_redhat·2026-07-19·CVSS 7.8
CVE-2026-53400 [HIGH] CWE-824 kernel: i2c: core: fix adapter registration race
kernel: i2c: core: fix adapter registration race
In the Linux kernel, the following vulnerability has been resolved:
i2c: core: fix adapter registration race
Adapters can be looked up based on their id using i2c_get_adapter()
which takes a reference to the embedded struct device.
Make sure that the adapter (including its struct device) has been
initialised before adding it to the IDR to avoid accessing uninitialised
data which could, for example, lead to NULL-pointer dereferences or
use-after-free.
Note that the i2c-dev chardev, which is registered from a bus notifier,
currently uses i2c_get_adapter() so the adapter needs to be added to the
IDR before registration.
A flaw was found in the Linux kernel, specifically within its I2C (Inter-Integrated Circuit) core component. This vulnerabil
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/1febb174815bcae56d73587e99e8f87e02f0784dhttps://git.kernel.org/stable/c/2e57c788e71f1763445f812eba4e0b4a2fbd0646https://git.kernel.org/stable/c/6a946038f2a5a8c29048c6af369d4e391448a5c5https://git.kernel.org/stable/c/78793c75dc6d0ff2e4d50ad617349b328a99054ehttps://git.kernel.org/stable/c/a4365bc41baaf67f3a5aa8556d23544e6ec7480ahttps://git.kernel.org/stable/c/a4c8094bbf4c6fa68b17e3b16f6a0a1b7a14f3e0https://git.kernel.org/stable/c/ba14d7cf2fe7284610a29854bdff22b2537d3ce6https://git.kernel.org/stable/c/da9d8d9711f78deebc202d0cffcf577e45ee8621
2026-07-19
Published