CVE-2023-52791: i2c: core: Run atomic i2c xfer when !preemptible
Vulnerability summary
CVE-2023-52791 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 15.1% of scored vulnerabilities.
Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 14 · Related 10Timeline
- 21-05-2024PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: i2c: core: Run atomic i2c xfer when !preemptible Since bae1d3a05a8b, i2c transfers are non-atomic if preemption is disabled. However, non-atomic i2c transfers require preemption (e.g. in wait_for_completion() while waiting for the DMA). panic() calls preempt_disable_notrace() before calling emergency_restart(). Therefore, if an i2c device is used for the restart, the xfer should be atomic. This avoids warnings like: [ 12.667612] WARNING: CPU: 1 PID: 1 at kernel/rcu/tree_plugin.h:318 rcu_note_context_switch+0x33c/0x6b0 [ 12.676926] Voluntary context switch within RCU read-side critical section! ... [ 12.742376] schedule_timeout from wait_for_completion_timeout+0x90/0x114 [ 12.749179] wait_for_completion_timeout from tegra_i2c_wait_completion+0x40/0x70 ... [ 12.994527] atomic_notifier_call_chain from machine_restart+0x34/0x58 [ 13.001050] machine_restart from panic+0x2a8/0x32c Use !preemptible() instead, which is basically the same check as pre-v5.2.
CVSS metrics
3 scores · 3 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.24%
Chance of exploitation in the next 30 days
Percentile
15%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.24% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu112 products
- linux< 5.4.0-173.191 | < 5.15.0-100.110
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.4.0-1120.130 | < 5.15.0-1056.61
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ bae1d3a05a8b99bd748168bbf8155a1d047c562e, < 25eb381a736e7ae39a4245ef5c96484eb1073809 | ≥ bae1d3a05a8b99bd748168bbf8155a1d047c562e, < 25284c46b657f48c0f3880a2e0706c70d81182c0 | ≥ bae1d3a05a8b99bd748168bbf8155a1d047c562e, < f6237afabc349c1c7909db00e15d2816519e0d2b | ≥ bae1d3a05a8b99bd748168bbf8155a1d047c562e, < 185f3617adc8fe45e40489b458f03911f0dec46c | ≥ bae1d3a05a8b99bd748168bbf8155a1d047c562e, < 8c3fa52a46ff4d208cefb1a462ec94e0043a91e1 | ≥ bae1d3a05a8b99bd748168bbf8155a1d047c562e, < 3473cf43b9068b9dfef2f545f833f33c6a544b91 | ≥ bae1d3a05a8b99bd748168bbf8155a1d047c562e, < aa49c90894d06e18a1ee7c095edbd2f37c232d02 | 5.2
- linux_kernel≥ 5.2, < 5.4.262 | ≥ 5.5, < 5.10.202 | ≥ 5.11, < 5.15.140 | ≥ 5.16, < 6.1.64 | ≥ 6.2, < 6.5.13 | ≥ 6.6, < 6.6.3
Debian1 product
- linux< 6.1.64-1 | < 6.6.8-1
3 vendors · 115 products
