CVE-2026-31549

i2c: cp2615: fix serial string NULL-deref at probe

State: Published
Severity: Not scored
Published: Apr 24, 2026
Updated: May 11, 2026
Reserved: Mar 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

i2c: cp2615: fix serial string NULL-deref at probe

The cp2615 driver uses the USB device serial string as the i2c adapter name but does not make sure that the string exists.

Verify that the device has a serial number before accessing it to avoid triggering a NULL-pointer dereference (e.g. with malicious devices).

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	4a7695429eade517b07ea72f9ec366130e81a076 to before e68c267787778bcdf3d91b06f794faaba7f0d1d1Affected 4a7695429eade517b07ea72f9ec366130e81a076 to before 4a22af879172336370ae3e81e7f65fb2f69472eeAffected 4a7695429eade517b07ea72f9ec366130e81a076 to before 69aece634a7eebafd9a596e5494d52facf6f26ecAffected 4a7695429eade517b07ea72f9ec366130e81a076 to before 13ccf9b106bba121728f1625c4375a1bd8f5c5a3Affected 4a7695429eade517b07ea72f9ec366130e81a076 to before a9778298f47036866ea15eeb17242e8a4612580fAffected 4a7695429eade517b07ea72f9ec366130e81a076 to before efe996bcfe50c2dcc6cf65c574285713b722ced7Affected 4a7695429eade517b07ea72f9ec366130e81a076 to before aa79f996eb41e95aed85a1bd7f56bcd6a3842008Affected
LinuxLinux	5.13Affected before 5.13Not affected 5.15.203 through 5.15.Not affected 6.1.167 through 6.1.Not affected 6.6.130 through 6.6.Not affected 6.12.78 through 6.12.Not affected 6.18.20 through 6.18.Not affected 6.19.10 through 6.19.Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

4a7695429eade517b07ea72f9ec366130e81a076 to before e68c267787778bcdf3d91b06f794faaba7f0d1d1Affected
4a7695429eade517b07ea72f9ec366130e81a076 to before 4a22af879172336370ae3e81e7f65fb2f69472eeAffected
4a7695429eade517b07ea72f9ec366130e81a076 to before 69aece634a7eebafd9a596e5494d52facf6f26ecAffected
4a7695429eade517b07ea72f9ec366130e81a076 to before 13ccf9b106bba121728f1625c4375a1bd8f5c5a3Affected
4a7695429eade517b07ea72f9ec366130e81a076 to before a9778298f47036866ea15eeb17242e8a4612580fAffected
4a7695429eade517b07ea72f9ec366130e81a076 to before efe996bcfe50c2dcc6cf65c574285713b722ced7Affected
4a7695429eade517b07ea72f9ec366130e81a076 to before aa79f996eb41e95aed85a1bd7f56bcd6a3842008Affected

LinuxLinux

5.13Affected
before 5.13Not affected
5.15.203 through 5.15.*Not affected
6.1.167 through 6.1.*Not affected
6.6.130 through 6.6.*Not affected
6.12.78 through 6.12.*Not affected
6.18.20 through 6.18.*Not affected
6.19.10 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.