What’s Vulnerable › Vulnerabilities

CVE-2026-64589: i2c: core: fix NULL-deref on adapter registration failure

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-06 · updated 2026-08-17

Description

In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix NULL-deref on adapter registration failure If adapter registration ever fails the release callback would trigger a NULL-pointer dereference as the completion struct has not been initialised. Note that before the offending commit this would instead have resulted in a minor memory leak of the adapter name.

Affected products

• Linux kernel: from 6.12.11 before 6.12.96; 6.13 — fixed in 6.12.96, 7.2

How to fix

Upgrade to a fixed version: Linux kernel 6.12.96, 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/034e307428119b67f5f18a35e4f4e7d15a2b9774
• https://git.kernel.org/stable/c/2295d2bb101faa663fbc45fadbb3fec45f107441
• https://git.kernel.org/stable/c/2ce0a74bfa3acdfcdb00cf02f181f2754b451f42
• https://git.kernel.org/stable/c/3351c5e77749a0c8a1e252b95420c143ebcf07ac

Get alerted when CVE-2026-64589 or the next vulnerability affects your stack