CVE-2026-80678 is a vulnerability in Linux Kernel
Published on August 28, 2026
i2c: imx: Fix slave registration race and error handling
In the Linux kernel, the following vulnerability has been resolved:
i2c: imx: Fix slave registration race and error handling
In i2c_imx_reg_slave(), the slave pointer was assigned before
pm_runtime_resume_and_get(). If pm_runtime_resume_and_get() failed,
the error path returned without clearing i2c_imx->slave, leaving it
non-NULL and causing all subsequent registration attempts to fail
with -EBUSY.
Additionally, because this driver uses a shared IRQ, the interrupt
handler i2c_imx_isr() can execute concurrently and, after acquiring
slave_lock, dereference i2c_imx->slave. The previous fix attempt
added a lockless i2c_imx->slave = NULL on the error path, but that
could race with the ISR under the lock and still cause a NULL pointer
dereference.
Fix both issues by deferring the assignment of i2c_imx->slave and
i2c_imx->last_slave_event to after a successful resume, and by
performing the assignment inside the slave_lock critical section.
This guarantees that the slave pointer is never left stale on the
error path and is always valid when observed by the interrupt handler.
Products Associated with CVE-2026-80678
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version f7414cd6923fd7f78e57086fc964ba2dc25db5c1 and below 754bc62f72fd64b202462367134ac8ce95b005de is affected.
- Version f7414cd6923fd7f78e57086fc964ba2dc25db5c1 and below cfdf6e13518589f911b7eace6ccb788e4ed87397 is affected.
- Version f7414cd6923fd7f78e57086fc964ba2dc25db5c1 and below b9f6f4883b9ac86654e75899d0dbf8a7a96ad5d8 is affected.
- Version f7414cd6923fd7f78e57086fc964ba2dc25db5c1 and below d6748f6802f3eebafaa16a5e5dcfbfb9b3bc173f is affected.
- Version f7414cd6923fd7f78e57086fc964ba2dc25db5c1 and below 12a4f0950a158d98552cbaeacc35edccd8d975fa is affected.
- Version f7414cd6923fd7f78e57086fc964ba2dc25db5c1 and below 614ca6594e301ff682999797c2216e9685558a2b is affected.
- Version f7414cd6923fd7f78e57086fc964ba2dc25db5c1 and below d64ec362c369bbc33833f7936d5f3a706b0d5c45 is affected.
- Version 5.11 is affected.
- Before 5.11 is unaffected.
- Version 5.15.217, <= 5.15.* is unaffected.
- Version 6.1.183, <= 6.1.* is unaffected.
- Version 6.6.151, <= 6.6.* is unaffected.
- Version 6.12.103, <= 6.12.* is unaffected.
- Version 6.18.44, <= 6.18.* is unaffected.
- Version 7.1.8, <= 7.1.* is unaffected.
- Version 7.2, <= * is unaffected.