CVE-2026-53400
kernel: i2c: core: fix adapter registration race
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 19, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel, specifically within its I2C (Inter-Integrated Circuit) core component. This vulnerability arises from a timing issue during the registration of I2C adapters, where an adapter could be accessed before it is fully prepared. This premature access to uninitialized data may lead to system instability, crashes, or a denial of service (DoS).
Statement
This vulnerability is rated as Moderate impact because exploitation requires local access and relies on winning a narrow timing window during hardware or driver initialization, primarily resulting in a denial of service through a kernel crash rather than privilege escalation. In typical Red Hat Enterprise Linux deployments, adapter registration happens at system boot or during dynamic hardware attachment, which significantly restricts an unprivileged attacker's opportunity to trigger the flaw.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-824 · Access of Uninitialized Pointer