Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-72142— i2c: imx: fix locked bus on SMBus block-read of 0 (atomic)

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会开源的一个操作系统内核。 Linux kernel存在安全漏洞，该漏洞源于SMBus块读取字节计数为0时原子轮询路径处理不当，返回错误时未发送NACK+STOP，可能导致I2C总线锁死。

AI Predicted 5.3 Difficulty: Moderate EPSS 0.22% · P11

Possible ATT&CK Techniques 1 AI

T1499 · Endpoint Denial of Service

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux 8e8782c71595a5ad29e234ce6b3d2fce787fb07a< 0f29df3c3d607a9dbc14aed0e45504ced4d2e7ec affected
8e8782c71595a5ad29e234ce6b3d2fce787fb07a< 38d4947431b2410850409fda016b2ac9f640a4dd affected
8e8782c71595a5ad29e234ce6b3d2fce787fb07a< e3e8b02d4773cfc5ad561d2e5505efde36c6927a affected
8e8782c71595a5ad29e234ce6b3d2fce787fb07a< 016ef0f6ca4bc9bf0330ac41bd2ea349759643e3 affected
8e8782c71595a5ad29e234ce6b3d2fce787fb07a< c882e8cc68fb993700dc21fd6e754001e6297934 affected
8e8782c71595a5ad29e234ce6b3d2fce787fb07a< 6d2c973926d0612360693bc559be2ffde836151b affected
8e8782c71595a5ad29e234ce6b3d2fce787fb07a< 60ed00d46616a9232e42ea7a3e3c0273d7cf7543 affected
8e8782c71595a5ad29e234ce6b3d2fce787fb07a< cb2fc37857693b55909fb77dc2c87cfbc1cdc476 affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-72142

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
i2c: imx: fix locked bus on SMBus block-read of 0 (atomic)
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) SMBus 3.1 6.5.7 allows a Block Read byte count of 0, but the atomic (polling) path rejects it as -EPROTO. Worse, it returns without a NACK+STOP: the next receive cycle has already started, so the target keeps holding SDA and the bus stays stuck until a power cycle for this i2c controller. Reading I2DR to obtain the count likewise arms the next byte on the count > I2C_SMBUS_BLOCK_MAX path, which also returned -EPROTO directly and left the bus held. Handle both: NACK the in-flight dummy byte (TXAK) and extend msgs->len so the existing last-byte handling emits STOP; the dummy byte is discarded. A count of 0 is a valid empty block read; a count above I2C_SMBUS_BLOCK_MAX is still reported as -EPROTO, but only after the bus has been released. The interrupt-driven path has the same flaw from a later commit and is fixed separately, as it carries a different Fixes: tag and stable range.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会开源的一个操作系统内核。 Linux kernel存在安全漏洞，该漏洞源于SMBus块读取字节计数为0时原子轮询路径处理不当，返回错误时未发送NACK+STOP，可能导致I2C总线锁死。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 8e8782c71595a5ad29e234ce6b3d2fce787fb07a ~ 0f29df3c3d607a9dbc14aed0e45504ced4d2e7ec -
Linux Linux 3.16 -

II. Public POCs for CVE-2026-72142

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-72142

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-72142 (6)

Other References for CVE-2026-72142 (1)

Same Patch Batch · Linux · 2026-08-15 · 844 CVEs total

CVE-2026-74475 10.0 CRITICAL vxlan: use neigh_ha_snapshot() in route_shortcircuit()
CVE-2026-74280 10.0 CRITICAL crypto: marvell/octeontx - fix DMA cleanup using wrong loop index
CVE-2026-74279 10.0 CRITICAL crypto: cavium/cpt - fix DMA cleanup using wrong loop index
CVE-2026-72407 10.0 CRITICAL geneve: validate inner network offset in geneve_gro_complete()
CVE-2026-72408 10.0 CRITICAL geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint
CVE-2026-74309 10.0 CRITICAL vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler
CVE-2026-72421 10.0 CRITICAL ipv4: fib: Don't ignore error route in local/main tables.
CVE-2026-72493 9.9 CRITICAL net: serialize netif_running() check in enqueue_to_backlog()
CVE-2026-72463 9.8 CRITICAL xfrm: Fix dev use-after-free in xfrm async resumption
CVE-2026-72248 9.8 CRITICAL netfilter: flowtable: support IPIP tunnel with direct xmit
CVE-2026-72381 9.8 CRITICAL ksmbd: fix use-after-free of fp->owner.name in durable handle owner check
CVE-2026-72477 9.8 CRITICAL fs/ntfs3: call _ntfs_bad_inode() when failing to rename
CVE-2026-72473 9.8 CRITICAL xprtrdma: Decouple req recycling from RPC completion
CVE-2026-72472 9.8 CRITICAL nfs: use nfsi->rwsem to protect traversal of the file lock list
CVE-2026-74406 9.8 CRITICAL vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().
CVE-2026-72221 9.8 CRITICAL sunrpc: wait for in-flight TLS handshake callback when cancel loses race
CVE-2026-74401 9.8 CRITICAL dlm: fix add msg handle in send_queue ordered
CVE-2026-72137 9.8 CRITICAL xfrm: nat_keepalive: avoid double free on send error
CVE-2026-74376 9.8 CRITICAL md/raid10: reset read_slot when reusing r10bio for discard
CVE-2026-72130 9.8 CRITICAL nvmet-auth: reject short AUTH_RECEIVE buffers

Showing top 20 of 844 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-72142

No comments yet

Leave a comment