In the Linux kernel, the following vulnerability has been resolved:

i2c: amd-mp2: Unregister callback on adapter add failure

amd_mp2_register_cb() stores the platform I2C context in the MP2 PCI
driver's callback table before the adapter is registered. If
i2c_add_adapter() fails, probe returns and devres frees the context,
but the PCI driver can still dereference the stale pointer from its IRQ
and system-sleep callbacks.

Unregister the callback before returning the adapter registration error.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
529766e0a0114438887382a68d97341fbf8349fb affected < 9142a3dcff0d80a3a24ce159aee19ddc869d9784
529766e0a0114438887382a68d97341fbf8349fb affected < 2f7789b3a9628819ebf90bcba8f9da3c139f8687
529766e0a0114438887382a68d97341fbf8349fb affected < 4786d4d70dcd1e6b7e044f2348e00f201947b69c
529766e0a0114438887382a68d97341fbf8349fb affected < b7c2c5c8868737926410b93d1223ada17625ead3
529766e0a0114438887382a68d97341fbf8349fb affected < cf107c5983dc70fcf932a305581a5f976d908ff1
529766e0a0114438887382a68d97341fbf8349fb affected < 1883a09a37fed497b9efacf736c23624a472246b
529766e0a0114438887382a68d97341fbf8349fb affected < 8bf719659406e4a1b56d441e0c7da2085d891d96
529766e0a0114438887382a68d97341fbf8349fb affected < 82048795242f04275a3f49ffc66ad851b6120954
Linux Linux affected
Version Status Constraints
5.2 affected —
0 unaffected < 5.2
5.10.265 unaffected ≤ 5.10.*
5.15.216 unaffected ≤ 5.15.*
6.1.183 unaffected ≤ 6.1.*
6.6.151 unaffected ≤ 6.6.*
6.12.103 unaffected ≤ 6.12.*
6.18.44 unaffected ≤ 6.18.*
7.1.8 unaffected ≤ 7.1.*
7.2 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/1883a09a37fed497b9efacf736c23624a472246b cve-icon cve-icon
https://git.kernel.org/stable/c/2f7789b3a9628819ebf90bcba8f9da3c139f8687 cve-icon cve-icon
https://git.kernel.org/stable/c/4786d4d70dcd1e6b7e044f2348e00f201947b69c cve-icon cve-icon
https://git.kernel.org/stable/c/82048795242f04275a3f49ffc66ad851b6120954 cve-icon cve-icon
https://git.kernel.org/stable/c/8bf719659406e4a1b56d441e0c7da2085d891d96 cve-icon cve-icon
https://git.kernel.org/stable/c/9142a3dcff0d80a3a24ce159aee19ddc869d9784 cve-icon cve-icon
https://git.kernel.org/stable/c/b7c2c5c8868737926410b93d1223ada17625ead3 cve-icon cve-icon
https://git.kernel.org/stable/c/cf107c5983dc70fcf932a305581a5f976d908ff1 cve-icon cve-icon
History

Fri, 28 Aug 2026 10:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-416

Fri, 28 Aug 2026 07:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: i2c: amd-mp2: Unregister callback on adapter add failure amd_mp2_register_cb() stores the platform I2C context in the MP2 PCI driver's callback table before the adapter is registered. If i2c_add_adapter() fails, probe returns and devres frees the context, but the PCI driver can still dereference the stale pointer from its IRQ and system-sleep callbacks. Unregister the callback before returning the adapter registration error.
Title i2c: amd-mp2: Unregister callback on adapter add failure
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-28T06:52:48.300Z

Reserved: 2026-08-26T14:34:25.783Z

Link: CVE-2026-80680

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-28T08:16:53.350

Modified: 2026-08-28T08:16:53.350

Link: CVE-2026-80680

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-28T10:00:06Z

Weaknesses