Answer in brief
CVE-2026-80678 records a Unknown severity vulnerability in i2c: imx: Fix slave registration race and error handling. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=f7414cd6923fd7f78e57086fc964ba2dc25db5c1 <754bc62f72fd64b202462367134ac8ce95b005de || >=f7414cd6923fd7f78e57086fc964ba2dc25db5c1 <cfdf6e13518589f911b7eace6ccb788e4ed87397 || >=f7414cd6923fd7f78e57086fc964ba2dc25db5c1 <b9f6f4883b9ac86654e75899d0dbf8a7a96ad5d8 || >=f7414cd6923fd7f78e57086fc964ba2dc25db5c1 <d6748f6802f3eebafaa16a5e5dcfbfb9b3bc173f || >=f7414cd6923fd7f78e57086fc964ba2dc25db5c1 <12a4f0950a158d98552cbaeacc35edccd8d975fa || >=f7414cd6923fd7f78e57086fc964ba2dc25db5c1 <614ca6594e301ff682999797c2216e9685558a2b || >=f7414cd6923fd7f78e57086fc964ba2dc25db5c1 <d64ec362c369bbc33833f7936d5f3a706b0d5c45 | 754bc62f72fd64b202462367134ac8ce95b005de, cfdf6e13518589f911b7eace6ccb788e4ed87397, b9f6f4883b9ac86654e75899d0dbf8a7a96ad5d8, d6748f6802f3eebafaa16a5e5dcfbfb9b3bc173f, 12a4f0950a158d98552cbaeacc35edccd8d975fa, 614ca6594e301ff682999797c2216e9685558a2b, d64ec362c369bbc33833f7936d5f3a706b0d5c45 |
| Linux/Linuxgeneric | 5.11 | Not reported |
Published upstream
Aug 28, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 28, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 28, 2026
In the Linux kernel, the following vulnerability has been resolved: i2c: imx: Fix slave registration race and error handling In i2c_imx_reg_slave(), the slave pointer was assigned before pm_runtime_resume_and_get(). If pm_runtime_resume_and_get() failed, the error path returned without clearing i2c_imx->slave, leaving it non-NULL and causing all subsequent registration attempts to fail with -EBUSY. Additionally, because this driver uses a shared IRQ, the interrupt handler i2c_imx_isr() can execute concurrently and, after acquiring slave_lock, dereference i2c_imx->slave. The previous fix attempt added a lockless i2c_imx->slave = NULL on the error path, but that could race with the ISR under the lock and still cause a NULL pointer dereference. Fix both issues by deferring the assignment of i2c_imx->slave and i2c_imx->last_slave_event to after a successful resume, and by performing the assignment inside the slave_lock critical section. This guarantees that the slave pointer is never left stale on the error path and is always valid when observed by the interrupt handler.
Quoted source text, attributed separately from HOL analysis.