SB20260816390 - Improper Check or Handling of Exceptional Conditions in Linux kernel i2c busses driver

Description

This security bulletin contains information about 1 vulnerability.

1) Improper Check or Handling of Exceptional Conditions (CVE-ID: CVE-2026-72141)

CWE-ID: CWE-703 - Improper Check or Handling of Exceptional Conditions

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper exceptional-condition handling in the i2c-imx SMBus block-read state machine when processing an SMBus block read with a byte count of 0 or an invalid oversized count. A local user can trigger a crafted block-read transaction to cause a denial of service.

The issue can leave the I2C bus stuck because the controller fails to complete the transfer with the required NACK and STOP sequence.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/07fd9385f0d87dff4b34f355f68adf701080cb24
• https://git.kernel.org/stable/c/56ddfc18ea8f7d77747658892873eb632b2ed530
• https://git.kernel.org/stable/c/5d3240f42a667e29262aff76fdebfcdac4980626