Race condition in Linux kernel - CVE-2026-80678
Published: August 28, 2026
Vulnerability identifier: #VU146114
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-80678
CWE-ID: CWE-362
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to a race condition in i2c_imx_reg_slave() and i2c_imx_isr() when registering an i2c slave device and handling shared interrupts. A local user can trigger concurrent slave registration and interrupt handling to cause a denial of service.
The issue can result in subsequent registration attempts failing with -EBUSY or in a NULL pointer dereference in the interrupt handler.
Affected software
Linux kernel
How to mitigate CVE-2026-80678
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
External References
- https://git.kernel.org/stable/c/12a4f0950a158d98552cbaeacc35edccd8d975fa
- https://git.kernel.org/stable/c/614ca6594e301ff682999797c2216e9685558a2b
- https://git.kernel.org/stable/c/754bc62f72fd64b202462367134ac8ce95b005de
- https://git.kernel.org/stable/c/b9f6f4883b9ac86654e75899d0dbf8a7a96ad5d8
- https://git.kernel.org/stable/c/cfdf6e13518589f911b7eace6ccb788e4ed87397
- https://git.kernel.org/stable/c/d64ec362c369bbc33833f7936d5f3a706b0d5c45
- https://git.kernel.org/stable/c/d6748f6802f3eebafaa16a5e5dcfbfb9b3bc173f