In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix NULL-deref on adapter registration failure If adapter… (CVE-2026-64589)
A NULL-pointer dereference vulnerability in the Linux kernel's i2c core was resolved. The flaw occurred during adapter registration failure, where a release callback would trigger a NULL-pointer dereference due to an uninitialized completion structure. Prior to the fix, this scenario caused a minor memory leak of the adapter name instead of a crash.
AI Analysis
Technical Summary
The Linux kernel contained a vulnerability in the i2c core subsystem where, if adapter registration failed, the release callback function would dereference a NULL pointer because the completion structure was not initialized. This could lead to a kernel NULL-pointer dereference. Before the fix, this failure path caused a minor memory leak rather than a crash. The vulnerability has been resolved in the kernel source.
Potential Impact
The vulnerability could cause a NULL-pointer dereference in the kernel, potentially leading to a kernel crash or denial of service. There is no indication of code execution or privilege escalation. The impact is limited to stability issues caused by the kernel fault.
Mitigation Recommendations
A fix has been implemented in the Linux kernel source to properly initialize the completion structure and prevent the NULL-pointer dereference on adapter registration failure. Users should update to a kernel version that includes this fix. Patch status is not explicitly confirmed in the provided data; check the vendor or Linux kernel advisories for the exact fixed versions and update accordingly.
In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix NULL-deref on adapter registration failure If adapter… (CVE-2026-64589)
Description
A NULL-pointer dereference vulnerability in the Linux kernel's i2c core was resolved. The flaw occurred during adapter registration failure, where a release callback would trigger a NULL-pointer dereference due to an uninitialized completion structure. Prior to the fix, this scenario caused a minor memory leak of the adapter name instead of a crash.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel contained a vulnerability in the i2c core subsystem where, if adapter registration failed, the release callback function would dereference a NULL pointer because the completion structure was not initialized. This could lead to a kernel NULL-pointer dereference. Before the fix, this failure path caused a minor memory leak rather than a crash. The vulnerability has been resolved in the kernel source.
Potential Impact
The vulnerability could cause a NULL-pointer dereference in the kernel, potentially leading to a kernel crash or denial of service. There is no indication of code execution or privilege escalation. The impact is limited to stability issues caused by the kernel fault.
Mitigation Recommendations
A fix has been implemented in the Linux kernel source to properly initialize the completion structure and prevent the NULL-pointer dereference on adapter registration failure. Users should update to a kernel version that includes this fix. Patch status is not explicitly confirmed in the provided data; check the vendor or Linux kernel advisories for the exact fixed versions and update accordingly.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-g8cm-qf26-vx33
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64589"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a74cfa0bf8831d5391b0a5c
Added to database: 08/06/2026, 18:17:04 UTC
Last enriched: 08/06/2026, 19:14:06 UTC
Last updated: 08/07/2026, 00:41:15 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.