CVE-2026-64589

A flaw was found in the Linux kernel's I2C core component. When an I2C adapter fails to register, a NULL-pointer dereference occurs because the associated completion structure is not properly initialized. This vulnerability can lead to a system crash, resulting in a Denial of Service (DoS).

This vulnerability is classified as having a Low severity impact because triggering the condition requires an error during hardware initialization on a local host, restricting the blast radius to a denial of service under atypical failure paths. Furthermore, supported Red Hat Enterprise Linux releases are not vulnerable, as the code change that introduced this bug in upstream kernels is absent from Red Hat enterprise kernel trees.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.