Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-31549

i2c: cp2615: fix serial string NULL-deref at probe

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: i2c: cp2615: fix serial string NULL-deref at probe The cp2615 driver uses the USB device serial string as the i2c adapter name but does not make sure that the string exists. Verify that the device has a serial number before accessing it to avoid triggering a NULL-pointer dereference (e.g. with malicious devices).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 4a7695429eade517b07ea72f9ec366130e81a076 to < e68c267787778bcdf3d91b06f794faaba7f0d1d1affected
  • 4a7695429eade517b07ea72f9ec366130e81a076 to < 4a22af879172336370ae3e81e7f65fb2f69472eeaffected
  • 4a7695429eade517b07ea72f9ec366130e81a076 to < 69aece634a7eebafd9a596e5494d52facf6f26ecaffected
  • 4a7695429eade517b07ea72f9ec366130e81a076 to < 13ccf9b106bba121728f1625c4375a1bd8f5c5a3affected
  • 4a7695429eade517b07ea72f9ec366130e81a076 to < a9778298f47036866ea15eeb17242e8a4612580faffected
  • 4a7695429eade517b07ea72f9ec366130e81a076 to < efe996bcfe50c2dcc6cf65c574285713b722ced7affected
  • 4a7695429eade517b07ea72f9ec366130e81a076 to < aa79f996eb41e95aed85a1bd7f56bcd6a3842008affected

Linux Linux

Default version status: affected

  • 5.13affected
  • 0 to < 5.13unaffected
  • 5.15.203 to ≤ 5.15.*unaffected
  • 6.1.167 to ≤ 6.1.*unaffected
  • 6.6.130 to ≤ 6.6.*unaffected
  • 6.12.78 to ≤ 6.12.*unaffected
  • 6.18.20 to ≤ 6.18.*unaffected
  • 6.19.10 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References