CVE-2026-80680i2c: amd-mp2: Unregister callback on adapter add failure
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: i2c: amd-mp2: Unregister callback on adapter add failure amd_mp2_register_cb() stores the platform I2C context in the MP2 PCI driver's callback table before the adapter is registered. If i2c_add_adapter() fails, probe returns and devres frees the context, but the PCI driver can still dereference the stale pointer from its IRQ and system-sleep callbacks. Unregister the callback before returning the adapter registration error.
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 29, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 529766e0a0114438887382a68d97341fbf8349fb builds before 9142a3dcff0d80a3a24ce159aee19ddc869d9784; 529766e0a0114438887382a68d97341fbf8349fb builds before 2f7789b3a9628819ebf90bcba8f9da3c139f8687; 529766e0a0114438887382a68d97341fbf8349fb builds before 4786d4d70dcd1e6b7e044f2348e00f201947b69c; from 529766e0a0114438887382a68d97341fbf8349fb before b7c2c5c8868737926410b93d1223ada17625ead3; from 529766e0a0114438887382a68d97341fbf8349fb before cf107c5983dc70fcf932a305581a5f976d908ff1; 529766e0a0114438887382a68d97341fbf8349fb builds before 1883a09a37fed497b9efacf736c23624a472246b; 529766e0a0114438887382a68d97341fbf8349fb builds before 8bf719659406e4a1b56d441e0c7da2085d891d96; from 529766e0a0114438887382a68d97341fbf8349fb before 82048795242f04275a3f49ffc66ad851b6120954 | CNA record |
References
- https://git.kernel.org/stable/c/9142a3dcff0d80a3a24ce159aee19ddc869d9784
- https://git.kernel.org/stable/c/2f7789b3a9628819ebf90bcba8f9da3c139f8687
- https://git.kernel.org/stable/c/4786d4d70dcd1e6b7e044f2348e00f201947b69c
- https://git.kernel.org/stable/c/b7c2c5c8868737926410b93d1223ada17625ead3
- https://git.kernel.org/stable/c/cf107c5983dc70fcf932a305581a5f976d908ff1
- https://git.kernel.org/stable/c/1883a09a37fed497b9efacf736c23624a472246b
- https://git.kernel.org/stable/c/8bf719659406e4a1b56d441e0c7da2085d891d96
- https://git.kernel.org/stable/c/82048795242f04275a3f49ffc66ad851b6120954
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.