Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: i2c: imx-lpi2c: mark I2C adapter when hardware is powered down On some i.MX… (CVE-2026-64278)
In the Linux kernel, the following vulnerability has been resolved: i2c: imx-lpi2c: mark I2C adapter when hardware is powered down On some i.MX platforms, certain I2C client drivers keep a periodic workqueue which continues to trigger I2C transfers. During system suspend/resume, there exists a time window between: - suspend_noirq and the system entering suspend - the system starting to resume and resume_noirq In this window, the I2C controller resources such as clock and pinctrl may already be disabled or not yet restored. If a workqueue triggers an I2C transfer in this period, the driver attempts to access I2C registers while the hardware resources are unavailable, which may lead to system hang. Mark the I2C adapter as suspended during noirq suspend and block new transfers until resume, ensuring that I2C transfers are only issued when hardware resources are available.
AI Analysis
Technical Summary
The Linux kernel vulnerability CVE-2026-64278 affects the i2c imx-lpi2c driver on certain i.MX platforms. During system suspend and resume, a timing window exists where I2C client drivers may trigger transfers while hardware resources are disabled or not restored, causing the driver to access I2C registers without available hardware, potentially resulting in system hangs. The fix involves marking the I2C adapter as suspended during the noirq suspend phase and blocking new transfers until the system resumes, preventing access to unavailable hardware resources.
Potential Impact
If exploited, this vulnerability can cause the system to hang during suspend/resume cycles due to improper handling of I2C transfers when hardware resources are unavailable. This affects system stability but does not indicate direct data compromise or privilege escalation.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The described fix involves marking the I2C adapter as suspended during the noirq suspend phase and blocking transfers until resume. Users should monitor vendor advisories for official patches or updates addressing this issue.
Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: i2c: imx-lpi2c: mark I2C adapter when hardware is powered down On some i.MX… (CVE-2026-64278)
Description
In the Linux kernel, the following vulnerability has been resolved: i2c: imx-lpi2c: mark I2C adapter when hardware is powered down On some i.MX platforms, certain I2C client drivers keep a periodic workqueue which continues to trigger I2C transfers. During system suspend/resume, there exists a time window between: - suspend_noirq and the system entering suspend - the system starting to resume and resume_noirq In this window, the I2C controller resources such as clock and pinctrl may already be disabled or not yet restored. If a workqueue triggers an I2C transfer in this period, the driver attempts to access I2C registers while the hardware resources are unavailable, which may lead to system hang. Mark the I2C adapter as suspended during noirq suspend and block new transfers until resume, ensuring that I2C transfers are only issued when hardware resources are available.
CVSS v3.1
Score 5.5medium
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel vulnerability CVE-2026-64278 affects the i2c imx-lpi2c driver on certain i.MX platforms. During system suspend and resume, a timing window exists where I2C client drivers may trigger transfers while hardware resources are disabled or not restored, causing the driver to access I2C registers without available hardware, potentially resulting in system hangs. The fix involves marking the I2C adapter as suspended during the noirq suspend phase and blocking new transfers until the system resumes, preventing access to unavailable hardware resources.
Potential Impact
If exploited, this vulnerability can cause the system to hang during suspend/resume cycles due to improper handling of I2C transfers when hardware resources are unavailable. This affects system stability but does not indicate direct data compromise or privilege escalation.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The described fix involves marking the I2C adapter as suspended during the noirq suspend phase and blocking transfers until resume. Users should monitor vendor advisories for official patches or updates addressing this issue.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-mxwh-8xg9-m967
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64278"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a65420f9c2644c7f80868dc
Added to database: 07/25/2026, 23:09:03 UTC
Last enriched: 08/15/2026, 03:16:10 UTC
Last updated: 09/07/2026, 10:52:10 UTC
Views: 51
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.