SB2026092485 - Infinite loop in Linux kernel i3c master driver

Description

This security bulletin contains information about 1 vulnerability.

1) Infinite loop (CVE-ID: CVE-2026-97515)

CWE-ID: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

CVSSv4: 4.1 [CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows an attacker with physical access to cause a denial of service.

The vulnerability exists due to improper interrupt status handling in the I3C master request IBI handler when an I3C target remains stuck holding SDA low on NPCM845. An attacker with physical access can cause an I3C target to hold the SDA line low to cause a denial of service.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/1effa3adfe53cb2bb28bf5640a676b791d5ab405
• https://git.kernel.org/stable/c/e9b139c4684ed8593a0b779ca02ea05f460b2eec