CVE-2026-72141

A flaw was found in the Linux kernel's i2c-imx driver. A malicious device on the I2C bus or a local attacker with access to the I2C bus could exploit this vulnerability by initiating an SMBus block-read operation with a zero byte count. This can cause the I2C bus to become locked, requiring a power cycle of the controller to restore functionality, leading to a Denial of Service (DoS).

This flaw is rated as Low severity because successful exploitation requires specialized NXP i.MX hardware architectures and either local access to the bus or physical access to an attached bus device. Standard enterprise server deployments on typical architectures are not affected as the driver is specific to i.MX platforms. Even on vulnerable hardware, the blast radius is confined to a denial of service on the impacted bus controller, causing it to lock up until power-cycled, with no exposure to unauthorized data disclosure or system compromise.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.