CVE-2026-80680

Katalog CVE

CVSS 7.8 · High EPSS 0,18%

Skor CVSS 3.1 7.8 (High) menurut CNA.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: i2c: amd-mp2: Unregister callback on adapter add failure amd_mp2_register_cb() stores the platform I2C context in the MP2 PCI driver's callback table before the adapter is registered. If i2c_add_adapter() fails, probe returns and devres frees the context, but the PCI driver can still dereference the stale pointer from its IRQ and system-sleep callbacks. Unregister the callback before returning the adapter registration error.

Rincian

Terbit di NVD

28 Agustus 2026

Terakhir diubah

29 Agustus 2026

Status NVD

Received

CVSS 3.1

7.8 (High), sumber CNA
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

0,18% peluang dieksploitasi; lebih tinggi dari 6,6% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/1883a09a37fed497b9efacf736c23624a472246b
• https://git.kernel.org/stable/c/2f7789b3a9628819ebf90bcba8f9da3c139f8687
• https://git.kernel.org/stable/c/4786d4d70dcd1e6b7e044f2348e00f201947b69c
• https://git.kernel.org/stable/c/82048795242f04275a3f49ffc66ad851b6120954
• https://git.kernel.org/stable/c/8bf719659406e4a1b56d441e0c7da2085d891d96
• https://git.kernel.org/stable/c/9142a3dcff0d80a3a24ce159aee19ddc869d9784
• https://git.kernel.org/stable/c/b7c2c5c8868737926410b93d1223ada17625ead3
• https://git.kernel.org/stable/c/cf107c5983dc70fcf932a305581a5f976d908ff1