---
cve: "CVE-2026-64589"
severity: "LOW"
cvss: 3.1
epss: "0.2%"
vendor: "Linux"
kev: false
exploited: false
published: "2026-08-06 08:16:34"
tags: [cve, security, low]
source: tsecurity.de CVE-Dossier
exported: "2026-09-20T22:24:18+02:00"
---

# CVE-2026-64589

> 3.1 LOW

## Beschreibung

In the Linux kernel, the following vulnerability has been resolved:

i2c: core: fix NULL-deref on adapter registration failure

If adapter registration ever fails the release callback would trigger a
NULL-pointer dereference as the completion struct has not been
initialised.

Note that before the offending commit this would instead have resulted
in a minor memory leak of the adapter name.

## Patch verfügbar (OSV)

- Kernel ≥ 6.12.96
- Kernel ≥ 6.18.39

## Referenzen

- <https://git.kernel.org/stable/c/2ce0a74bfa3acdfcdb00cf02f181f2754b451f42>
- <https://git.kernel.org/stable/c/3351c5e77749a0c8a1e252b95420c143ebcf07ac>
- <https://git.kernel.org/stable/c/034e307428119b67f5f18a35e4f4e7d15a2b9774>
- <https://git.kernel.org/stable/c/2295d2bb101faa663fbc45fadbb3fec45f107441>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2026-64589) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_