CVE-2026-64279CWE-362

CVE-2026-64279

High · published July 25, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
2.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

i2c: core: fix adapter deregistration race

Adapters can be looked up by their id using i2c_get_adapter() which

takes a reference to the embedded struct device.

Remove the adapter from the IDR before tearing it down during

deregistration (and on registration failure) to make sure its resources

are not accessed after having been freed (e.g. the device name).

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00133 · 2.5th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2026-07-25T14:17Z
Affected products (6)
ProductVersionsFixed in
linux/linux_kernel≥ 2.6.31, < 5.15.2125.15.212
linux/linux_kernel≥ 5.16, < 6.1.1786.1.178
linux/linux_kernel≥ 6.2, < 6.6.1456.6.145
linux/linux_kernel≥ 6.7, < 6.12.966.12.96
linux/linux_kernel≥ 6.13, < 6.18.396.18.39
linux/linux_kernel≥ 6.19, < 7.1.47.1.4
References (9)
EPSS history
Timeline
  • 25 JUL 08:49Z
    i2c: core: fix adapter deregistration race
    cvelistv5