CVE-2026-23369

A flaw was found in the Linux kernel's i2c i801 driver. Under rare circumstances, multiple udev threads can concurrently access the i801_acpi_io_handler during system boot. This can lead to a null pointer dereference when the i2c_lock_bus attempts to use an unregistered memory area. A local attacker could potentially exploit this to cause a kernel panic, resulting in a Denial of Service (DoS).

This flaw affects systems with Intel i801 SMBus controllers during boot. The race between concurrent udev threads accessing i801_acpi_io_handler can cause a NULL pointer dereference when the ACPI region is deregistered while still being accessed. This is a boot-time race condition, not exploitable post-boot.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.