CVE-2026-80680

A flaw was found in the Linux kernel's i2c: amd-mp2 driver. During the registration of an I2C adapter, the driver may store a memory address (pointer) that later becomes invalid if the adapter registration fails. This can lead to the driver attempting to access this invalid memory location (a "stale pointer") during interrupt or system-sleep operations. Such an attempt could cause the system to crash, resulting in a denial of service.

A moderate severity flaw was found in the Linux kernel's i2c amd-mp2 driver. The driver's amd_mp2_register_cb() function stores the platform I2C context in the AMD MP2 PCI driver's callback table before the I2C adapter is registered. If i2c_add_adapter() subsequently fails, the probe function returns and the context is freed, while the callback table still holds the now-stale pointer. The PCI driver can then dereference that stale pointer from its interrupt (IRQ) and system-sleep callbacks, which can crash the kernel and cause a denial of service. Triggering this condition requires local access on systems using the affected AMD MP2 hardware. All Red Hat Enterprise Linux and Red Hat In-Vehicle OS kernel, kernel-rt, and kernel-ivos-qualcomm packages listed in this flaw are not affected because the vulnerable code is not present in the shipped versions. Red Hat rates this flaw as Moderate severity (CVSS 5.5, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) because only availability is impacted, whereas the upstream CVE record assigns 7.8 (Important) by additionally claiming high confidentiality and integrity impacts, which the technical evidence of a stale pointer dereference does not support.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.