CVE-2026-53339 Details
Description
In the Linux kernel, the following vulnerability has been resolved: i2c: qcom-cci: Fix NULL pointer dereference in cci_remove() On all modern platforms Qualcomm CCI controller provides two I2C masters, and on particular boards only one I2C master may be initialized, and in such cases the device unbinding or driver removal causes a NULL pointer dereference, because cci_halt() is called for all two I2C masters, but a completion is initialized only for the single enabled master: % rmmod i2c-qcom-cci Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 <snip> Call trace: __wait_for_common+0x194/0x1a8 (P) wait_for_completion_timeout+0x20/0x2c cci_remove+0xc4/0x138 [i2c_qcom_cci] platform_remove+0x20/0x30 device_remove+0x4c/0x80 device_release_driver_internal+0x1c8/0x224 driver_detach+0x50/0x98 bus_remove_driver+0x6c/0xbc driver_unregister+0x30/0x60 platform_driver_unregister+0x14/0x20 qcom_cci_driver_exit+0x18/0x1008 [i2c_qcom_cci] ....
A NULL pointer dereference vulnerability has been identified in the Linux kernel's I2C Qualcomm CCI driver. This issue occurs on certain boards where only one of the two I2C masters provided by the Qualcomm CCI controller is initialized. When the driver is removed or the device is unbound, the uninitialized master leads to a NULL pointer dereference. The problem arises because the driver removal process calls a halt function for both I2C masters, but only the active master has been properly initialized, causing a crash.
The vulnerability has been fixed in the Linux kernel. Users should upgrade to the latest version where this issue has been addressed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/4cd206c1d57a9370d5219f7b1fc45169d7bdf951 | kernel.org | Patch |
| https://git.kernel.org/stable/c/4d2b4a9cda6837e5ee1de1290f2e773a713b71e9 | kernel.org | Patch |
| https://git.kernel.org/stable/c/7107627b8b35015027201e7a095a3f6e30b4a46f | kernel.org | Patch |
| https://git.kernel.org/stable/c/729ac5a4b966aac42e08a94dea966f4429008548 | kernel.org | Patch |
| https://git.kernel.org/stable/c/8ce7ff721a5e9d06d53ef65d01c89fce6d26d6ff | kernel.org | Patch |
| https://git.kernel.org/stable/c/a162a260c8c4db7501c65220e76913e8e351f823 | kernel.org | Patch |
| https://git.kernel.org/stable/c/a50b8adb9cdb9a495b0b45583956897b7411ed7a | kernel.org | Patch |
| https://git.kernel.org/stable/c/e8669d12da0ade52adfe0abe96cd99e708abc9bd | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.8, < 5.10.259 >= 5.11, < 5.15.210 >= 5.16, < 6.1.176 >= 6.2, < 6.6.143 >= 6.7, < 6.12.94 >= 6.13, < 6.18.36 >= 6.19, < 7.0.13 7.1 rc1 7.1 rc2 7.1 rc3 7.1 rc4 7.1 rc5 7.1 rc6 7.1 rc7 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 23, 2026 | Initial Analysis | [email protected] |
| Jul 1, 2026 | New CVE Received | kernel.org |