CVE-2026-52948

A flaw was found in the Linux kernel's I2C (Inter-Integrated Circuit) subsystem. A malicious local user can exploit an integer overflow vulnerability in the I2C_TIMEOUT ioctl. By providing a large timeout value, the multiplication by 10 causes an overflow, leading to a truncated value. This results in the SMBus (System Management Bus) state machine entering an unrecoverable state, causing a local Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.