CVE-2026-23197

A flaw was found in the Linux kernel's i2c-imx driver. A local attacker could exploit a vulnerability in the block data length handler. When an I2C block read returns an invalid length, the system enters an endless read loop, leading to buffer overruns and a system crash, resulting in a Denial of Service (DoS).

This is a MODERATE impact denial of service flaw in the Linux kernel's i2c-imx driver. A local attacker could trigger an endless read loop by providing an invalid I2C block data length, leading to a system crash. Red Hat Enterprise Linux 6, 7, 8, and 9 are not affected as the vulnerable code is not present. Red Hat Enterprise Linux 10 and Red Hat In-Vehicle OS are affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, if the i2c-imx kernel module is not essential for system operation, it can be prevented from loading. Create a file named /etc/modprobe.d/blacklist-i2c-imx.conf with the content blacklist i2c-imx. After creating the file, regenerate the initramfs and reboot the system for the changes to take effect. This can be done using the commands: dracut -f -v followed by reboot. Be aware that blacklisting this module may impact functionality if I2C devices relying on the i2c-imx driver are in use.