i2c: mux: Fix channel node leak on adapter add failure (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.22 % · percentile 12 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: i2c: mux: Fix channel node leak on adapter add failure i2c_mux_add_adapter() takes a reference to the Device Tree channel node before registering the new adapter. If adapter registration fails, the error path frees the private data without dropping that reference. Release the channel node before freeing the private data.
References
- https://git.kernel.org/stable/c/4f42f70afd2447f3c82ca69d1e03466a75348ba9
- https://git.kernel.org/stable/c/4c9bc46a2a4afb7a11c48d33bdf19febab431015
- https://git.kernel.org/stable/c/dd2c1e6747b17b24ecddd48a7bb6bb964c2793d1
- https://git.kernel.org/stable/c/0927153f2abf48b6cc3e5f27063a17f7a8d47f38
- https://git.kernel.org/stable/c/b580f062b24c4eef562f08f210c028adb34ef14e
- https://git.kernel.org/stable/c/2b3b06cb709c4bf75a3fe3da3a0ca368ee3b40e5
- https://git.kernel.org/stable/c/694e7e6edf249723ca7d3ef77c2ca1badfc78dc4
- https://git.kernel.org/stable/c/385c7af4e3b95d0769fd211831674e83b16a2ebf
European references
- ENISA EUVD · EUVD-2026-80582
- GCVE · GCVE-0-2026-89982
CERT-FR advisories
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1375 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1289 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1253 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected bc45449b1444611d68466ae7f45f235420d79019 < 4f42f70afd2447f3c82ca69d1e03466a75348ba9 ; affected bc45449b1444611d68466ae7f45f235420d79019 < 4c9bc46a2a4afb7a11c48d33bdf19febab431015 ; affected bc45449b1444611d68466ae7f45f235420d79019 < dd2c1e6747b17b24ecddd48a7bb6bb964c2793d1 ; affected bc45449b1444611d68466ae7f45f235420d79019 < 0927153f2abf48b6cc3e5f27063a17f7a8d47f38 ; affected bc45449b1444611d68466ae7f45f235420d79019 < b580f062b24c4eef562f08f210c028adb34ef14e ; affected bc45449b1444611d68466ae7f45f235420d79019 < 2b3b06cb709c4bf75a3fe3da3a0ca368ee3b40e5 |
| Linux · Linux | affected 3.5 ; unaffected 0 < 3.5 ; unaffected 5.10.270 ≤ 5.10.* ; unaffected 5.15.221 ≤ 5.15.* ; unaffected 6.1.188 ≤ 6.1.* ; unaffected 6.6.157 ≤ 6.6.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |