PT-2026-54807 · Linux · Linux Kernel

CVE-2026-53339 · Published 2026-07-01 · Updated 2026-07-20

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs in the cci remove() function within the Qualcomm CCI controller driver. On platforms where only one of the two available I2C masters is initialized, removing the driver or unbinding the device triggers this issue. This happens because the cci halt() function is called for both I2C masters, but the completion mechanism is only initialized for the single enabled master.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-53339

ECHO-CC15-2DB8-B0F4

SUSE-SU-2026:3130-1

Affected Products

Linux Kernel

References · 1074

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53339.json · Exploit
• https://cve.org/CVERecord?id=CVE-2026-53339 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:3130-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-53339 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-53339 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-53339 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-53339 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-53339 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-53339 · Security Note
• https://ubuntu.com/security/CVE-2026-53339 · Vendor Advisory
• https://bugzilla.suse.com/1269646 · Note
• https://bugzilla.suse.com/1264556 · Note
• https://bugzilla.suse.com/1267691 · Note
• https://suse.com/security/cve/CVE-2026-43061 · Note
• https://suse.com/security/cve/CVE-2026-43270 · Note