PT-2026-64500 · Linux · Linux

CVE-2026-64279 · Published 2026-07-25 · Updated 2026-07-25

Mitre

In the Linux kernel, the following vulnerability has been resolved:

i2c: core: fix adapter deregistration race

Adapters can be looked up by their id using i2c get adapter() which takes a reference to the embedded struct device.

Remove the adapter from the IDR before tearing it down during deregistration (and on registration failure) to make sure its resources are not accessed after having been freed (e.g. the device name).

Related Identifiers

CVE-2026-64279

Affected Products

Linux

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-64279 · Security Note
• https://git.kernel.org/stable/c/d39282f552dd6c35b9b84b4af78f1198c24f3373 · Note
• https://git.kernel.org/stable/c/b6d2af6fe9c1f5ec0484536753c979cbd40a8ac3 · Note
• https://git.kernel.org/stable/c/bb234487a447a99315add1b46aa57b72e163e1eb · Note
• https://git.kernel.org/stable/c/35dbd1f1f603401155cbd3a180bb18e3a3b675b8 · Note
• https://git.kernel.org/stable/c/11dfa37bf544cc806f21742ca2fd2d841bd7032e · Note
• https://git.kernel.org/stable/c/9882a9bd74db08e7bae5821a7050627ae92d3380 · Note
• https://git.kernel.org/stable/c/b1a58ed9eab146b36f41a55db8f5d7ce9fdedf3f · Note