CVE Database
/

CVE-2026-23197

Back to search

CVE-2026-23197

Published: Feb 14, 2026

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: preserve error state in block data length handler When a block read returns an invalid length, zero or >I2C_SMBUS_BLOCK_MAX, the length handler sets the state to IMX_I2C_STATE_FAILED. However, i2c_imx_master_isr() unconditionally overwrites this with IMX_I2C_STATE_READ_CONTINUE, causing an endless read loop that overruns buffers and crashes the system. Guard the state transition to preserve error states set by the length handler.

VendorProductVersions

Linux

Linux

affected
5f5c2d4579ca6836f5604cca979debd68ecfe23f - < 3f9b508b3eecc00a243edf320bd83834d6a9b482
affected
5f5c2d4579ca6836f5604cca979debd68ecfe23f - < b126097b0327437048bd045a0e4d273dea2910dd

Linux

Linux

affected
6.13
unaffected
0 - < 6.13
unaffected
6.18.10 - <= 6.18.*
unaffected
6.19 - <= *

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now