CVE-2026-64589: linux
Vulnerability summary
CVE-2026-64589 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.16% chance of exploitation in the next 30 days, higher than 4.4% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 21 · Related 21Timeline
- 06-08-2026PublishedVulnerability first disclosed.
- 17-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix NULL-deref on adapter registration failure If adapter registration ever fails the release callback would trigger a NULL-pointer dereference as the completion struct has not been initialised. Note that before the offending commit this would instead have resulted in a minor memory leak of the adapter name.
CVSS metrics
Risk metrics not yet published.
EPSS trend
Probability
0.16%
Chance of exploitation in the next 30 days
Percentile
4%
Versus all other CVEs
30-day change
0.00 pp
From 0.16% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu119 products
- linux< 7.0.0-31.31
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 7.0.0-1012.12
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian2 products
- linux< 6.12.96-1 | < 7.1.4-1
- linux-6.12< 6.12.100-1~deb12u1
Linux1 product
- linux≥ e19f31169f85c712c9fca35bfd28ceb093a9f574, < 2ce0a74bfa3acdfcdb00cf02f181f2754b451f42 | ≥ 3f8c4f5e9a57868fa107016c81165686d23325f2, < 3351c5e77749a0c8a1e252b95420c143ebcf07ac | ≥ 3f8c4f5e9a57868fa107016c81165686d23325f2, < 034e307428119b67f5f18a35e4f4e7d15a2b9774 | ≥ 3f8c4f5e9a57868fa107016c81165686d23325f2, < 2295d2bb101faa663fbc45fadbb3fec45f107441 | ≥ 6.12.11, < 6.12.96 | 6.13
3 vendors · 122 products