CVE-2026-80680

i2c: amd-mp2: Unregister callback on adapter add failure

State: Published
Severity: 7.8 High
Published: Aug 28, 2026
Updated: Aug 29, 2026
Reserved: Aug 26, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

i2c: amd-mp2: Unregister callback on adapter add failure

amd_mp2_register_cb() stores the platform I2C context in the MP2 PCI driver's callback table before the adapter is registered. If i2c_add_adapter() fails, probe returns and devres frees the context, but the PCI driver can still dereference the stale pointer from its IRQ and system-sleep callbacks.

Unregister the callback before returning the adapter registration error.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	529766e0a0114438887382a68d97341fbf8349fb to before 9142a3dcff0d80a3a24ce159aee19ddc869d9784Affected 529766e0a0114438887382a68d97341fbf8349fb to before 2f7789b3a9628819ebf90bcba8f9da3c139f8687Affected 529766e0a0114438887382a68d97341fbf8349fb to before 4786d4d70dcd1e6b7e044f2348e00f201947b69cAffected 529766e0a0114438887382a68d97341fbf8349fb to before b7c2c5c8868737926410b93d1223ada17625ead3Affected 529766e0a0114438887382a68d97341fbf8349fb to before cf107c5983dc70fcf932a305581a5f976d908ff1Affected 529766e0a0114438887382a68d97341fbf8349fb to before 1883a09a37fed497b9efacf736c23624a472246bAffected 529766e0a0114438887382a68d97341fbf8349fb to before 8bf719659406e4a1b56d441e0c7da2085d891d96Affected 529766e0a0114438887382a68d97341fbf8349fb to before 82048795242f04275a3f49ffc66ad851b6120954Affected
LinuxLinux	5.2Affected before 5.2Not affected 5.10.265 through 5.10.Not affected 5.15.216 through 5.15.Not affected 6.1.183 through 6.1.Not affected 6.6.151 through 6.6.Not affected 6.12.103 through 6.12.Not affected 6.18.44 through 6.18.Not affected 7.1.8 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

529766e0a0114438887382a68d97341fbf8349fb to before 9142a3dcff0d80a3a24ce159aee19ddc869d9784Affected
529766e0a0114438887382a68d97341fbf8349fb to before 2f7789b3a9628819ebf90bcba8f9da3c139f8687Affected
529766e0a0114438887382a68d97341fbf8349fb to before 4786d4d70dcd1e6b7e044f2348e00f201947b69cAffected
529766e0a0114438887382a68d97341fbf8349fb to before b7c2c5c8868737926410b93d1223ada17625ead3Affected
529766e0a0114438887382a68d97341fbf8349fb to before cf107c5983dc70fcf932a305581a5f976d908ff1Affected
529766e0a0114438887382a68d97341fbf8349fb to before 1883a09a37fed497b9efacf736c23624a472246bAffected
529766e0a0114438887382a68d97341fbf8349fb to before 8bf719659406e4a1b56d441e0c7da2085d891d96Affected
529766e0a0114438887382a68d97341fbf8349fb to before 82048795242f04275a3f49ffc66ad851b6120954Affected

LinuxLinux

5.2Affected
before 5.2Not affected
5.10.265 through 5.10.*Not affected
5.15.216 through 5.15.*Not affected
6.1.183 through 6.1.*Not affected
6.6.151 through 6.6.*Not affected
6.12.103 through 6.12.*Not affected
6.18.44 through 6.18.*Not affected
7.1.8 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.