SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-80680

HIGH · CVSS 7.8 EPSS 0.13%

Source: NVD + CISA KEV + EPSS · Published 2026-08-28 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's I2C subsystem, specifically within the AMD MP2 PCI driver, where a stale pointer can be dereferenced if the adapter registration fails. This can lead to potential system crashes or undefined behavior during IRQ and system-sleep operations. Linux system administrators and developers working with AMD hardware should prioritize addressing this issue to ensure system stability and prevent exploitation.

CVE
CVE-2026-80680
Severity
HIGH
CVSS
7.8
EPSS
0.13%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: i2c: amd-mp2: Unregister callback on adapter add failure amd_mp2_register_cb() stores the platform I2C context in the MP2 PCI driver's callback table before the adapter is registered. If i2c_add_adapter() fails, probe returns and devres frees the context, but the PCI driver can still dereference the stale pointer from its IRQ and system-sleep callbacks. Unregister the callback before returning the adapter registration error.