ZeroDay Findings
Sign inSign up

Findings

CVE-2026-98280

drm/xe/i2c: Disable IRQ on unbind

Published Oct 6, 2026 · updated Oct 15, 2026

In the Linux kernel, the following vulnerability has been resolved: drm/xe/i2c: Disable IRQ on unbind Currently, struct xe_i2c is freed before SGUnit IRQ is disabled in unbind path, leaving a potential UAF in case I2C IRQ is hit during this small window. Explicitly disable I2C IRQ in xe_i2c_remove() and fix this. (cherry picked from commit 8ba5c8b8ab3fd362267c11df2cd5a90ee46f6e24)

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 6, 2026 · OSV.dev

    Detected

    In the Linux kernel, the following vulnerability has been resolved: drm/xe/i2c: Disable IRQ on unbind Currently, struct xe_i2c is freed before SGUnit IRQ is disabled in unbind path, leaving a potential UAF in case I2C IRQ is hit during this small window. Explicitly disable I2C IRQ in xe_i2c_remove() and fix this. (cherry picked from commit 8ba5c8b8ab3fd362267c11df2cd5a90ee46f6e24)

  2. Oct 15, 2026 · OSV.dev

    Fix available

    Kernel fixed in 7.2.8

  3. Oct 15, 2026 · OSV.dev

    Fix available

    Kernel fixed in 7.2.8

  4. Oct 15, 2026 · OSV.dev

    Updated

    In the Linux kernel, the following vulnerability has been resolved: drm/xe/i2c: Disable IRQ on unbind Currently, struct xe_i2c is freed before SGUnit IRQ is disabled in unbind path, leaving a potential UAF in case I2C IRQ is hit during this small window. Explicitly disable I2C IRQ in xe_i2c_remove() and fix this. (cherry picked from commit 8ba5c8b8ab3fd362267c11df2cd5a90ee46f6e24)

Affected

  • Linux Kernel6.19.0 → 7.2.8

Sources

  • CVE.orgVulnerability recordCVE-2026-98280

    Official CVE identifier

    cve.org
  • OSV.devPackage advisoryCVE-2026-98280

    drm/xe/i2c: Disable IRQ on unbind

    osv.dev

References