CVE-2026-72140

i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource()

Published Aug 15, 2026 CVSS n/a EPSS < 1% KEV · Not listed

Description

In the Linux kernel, the following vulnerability has been resolved:

i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource()

If devm_platform_get_and_ioremap_resource() returns an error,
mlxbf_i2c_init_resource() frees tmp_res before reading tmp_res->io to
get the error code. This results in a use-after-free.

Save the error code before freeing tmp_res.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`b5b5b32081cd206baa6e58cca7f112d9723785d6`	affected	< 6a108c9f5a81bb7b29dbb1398be0089655b6bfd2
`b5b5b32081cd206baa6e58cca7f112d9723785d6`	affected	< c4d9b6a0c9645366d9e4af8a6ac8347bd4c841aa
`b5b5b32081cd206baa6e58cca7f112d9723785d6`	affected	< b398cbbbb9dd76210682a8c9aabd34c5168800b9
`b5b5b32081cd206baa6e58cca7f112d9723785d6`	affected	< 5290a52533e09c38374963f4bb0b35121fe555c7
`b5b5b32081cd206baa6e58cca7f112d9723785d6`	affected	< ce960a1b2caa4ad08291f28d8bcf17ad5a864e54
`b5b5b32081cd206baa6e58cca7f112d9723785d6`	affected	< e6a395a71f4652261d09b572a03c96052662a056
`b5b5b32081cd206baa6e58cca7f112d9723785d6`	affected	< fb267770bf822064f510c9b46743f533d8fa8a5f
`b5b5b32081cd206baa6e58cca7f112d9723785d6`	affected	< 71356737a7a55c76fee847563e3d33f8e6dc6b6d

Linux

affected

Version	Status	Constraints
`5.10`	affected	—
`0`	unaffected	< 5.10
`5.10.261`	unaffected	≤ 5.10.*
`5.15.212`	unaffected	≤ 5.15.*
`6.1.178`	unaffected	≤ 6.1.*
`6.6.145`	unaffected	≤ 6.6.*
`6.12.97`	unaffected	≤ 6.12.*
`6.18.40`	unaffected	≤ 6.18.*
`7.1.5`	unaffected	≤ 7.1.*
`7.2`	unaffected	≤ *

No data.

Vendor Product Versions

Linux

Linux Kernel

Version	Status	Scheme	Platform
`[b5b5b32081cd206baa6e58cca7f112d9723785d6,6a108c9f5a81bb7b29dbb1398be0089655b6bfd2)`	affected	code_commit	—
`[b5b5b32081cd206baa6e58cca7f112d9723785d6,c4d9b6a0c9645366d9e4af8a6ac8347bd4c841aa)`	affected	code_commit	—
`[b5b5b32081cd206baa6e58cca7f112d9723785d6,b398cbbbb9dd76210682a8c9aabd34c5168800b9)`	affected	code_commit	—
`[b5b5b32081cd206baa6e58cca7f112d9723785d6,5290a52533e09c38374963f4bb0b35121fe555c7)`	affected	code_commit	—
`[b5b5b32081cd206baa6e58cca7f112d9723785d6,ce960a1b2caa4ad08291f28d8bcf17ad5a864e54)`	affected	code_commit	—
`[b5b5b32081cd206baa6e58cca7f112d9723785d6,e6a395a71f4652261d09b572a03c96052662a056)`	affected	code_commit	—
`[b5b5b32081cd206baa6e58cca7f112d9723785d6,fb267770bf822064f510c9b46743f533d8fa8a5f)`	affected	code_commit	—
`[b5b5b32081cd206baa6e58cca7f112d9723785d6,71356737a7a55c76fee847563e3d33f8e6dc6b6d)`	affected	code_commit	—

Linux

Linux Kernel

Version	Status	Scheme	Platform
`5.10`	affected	semver	—
`[0,5.10)`	unaffected	generic	—
`[5.10.261,5.11.0)`	unaffected	semver	—
`[5.15.212,5.16.0)`	unaffected	semver	—
`[6.1.178,6.2.0)`	unaffected	semver	—
`[6.6.145,6.7.0)`	unaffected	semver	—
`[6.12.97,6.13.0)`	unaffected	semver	—
`[6.18.40,6.19.0)`	unaffected	semver	—
`[7.1.5,7.2.0)`	unaffected	semver	—
`[7.2-rc4,*]`	unaffected	generic	—

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

Source	ID	Title
Ubuntu USN	USN-8876-1	Linux kernel (Azure CVM) vulnerabilities
Ubuntu USN	USN-8875-1	Linux kernel vulnerabilities
Ubuntu USN	USN-8877-1	Linux kernel (GCP) vulnerabilities
Ubuntu USN	USN-8878-1	Linux kernel (GCP) vulnerabilities
Ubuntu USN	USN-8879-1	Linux kernel (Oracle) vulnerabilities
Ubuntu USN	USN-8887-1	Linux kernel vulnerabilities
Ubuntu USN	USN-8888-1	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-8889-1	Linux kernel (OEM) vulnerabilities
Ubuntu USN	USN-8887-2	Linux kernel (AWS) vulnerabilities
Ubuntu USN	USN-8888-2	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-8875-2	Linux kernel (NVIDIA) vulnerabilities
Ubuntu USN	USN-8887-3	Linux kernel vulnerabilities
Ubuntu USN	USN-8917-1	Linux kernel vulnerabilities
Ubuntu USN	USN-8918-1	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-9003-1	Linux kernel (NVIDIA) vulnerabilities
Ubuntu USN	USN-9024-1	Linux kernel vulnerabilities
Ubuntu USN	USN-9025-1	Linux kernel vulnerabilities
Ubuntu USN	USN-9026-1	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-9029-1	Linux kernel (Raspberry Pi) vulnerabilities
Ubuntu USN	USN-9040-1	Linux kernel (Low Latency NVIDIA) vulnerabilities
Ubuntu USN	USN-9043-1	Linux kernel (NVIDIA) vulnerabilities
Ubuntu USN	USN-9066-1	Linux kernel (HWE) vulnerabilities
Ubuntu USN	USN-9091-1	Linux kernel (NVIDIA Tegra) vulnerabilities

Metrics

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.220% probability within 30 days)

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/5290a52533e09c38374963f4bb0b35121fe555c7
https://git.kernel.org/stable/c/6a108c9f5a81bb7b29dbb1398be0089655b6bfd2
https://git.kernel.org/stable/c/71356737a7a55c76fee847563e3d33f8e6dc6b6d
https://git.kernel.org/stable/c/b398cbbbb9dd76210682a8c9aabd34c5168800b9
https://git.kernel.org/stable/c/c4d9b6a0c9645366d9e4af8a6ac8347bd4c841aa
https://git.kernel.org/stable/c/ce960a1b2caa4ad08291f28d8bcf17ad5a864e54
https://git.kernel.org/stable/c/e6a395a71f4652261d09b572a03c96052662a056
https://git.kernel.org/stable/c/fb267770bf822064f510c9b46743f533d8fa8a5f

History

Aug 15, 2026 9:00 AM Weaknesses updated View changes

Type	Values Removed	Values Added
Weaknesses		CWE-416

Aug 15, 2026 6:00 AM Description updated. Title updated. First appearance in the feed. Affected versions updated. Affected vendors updated. Added references View changes

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource() If devm_platform_get_and_ioremap_resource() returns an error, mlxbf_i2c_init_resource() frees tmp_res before reading tmp_res->io to get the error code. This results in a use-after-free. Save the error code before freeing tmp_res.
Title		i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource()
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/5290a52533e09c38374963f4bb0b35121fe555c7 https://git.kernel.org/stable/c/6a108c9f5a81bb7b29dbb1398be0089655b6bfd2 https://git.kernel.org/stable/c/71356737a7a55c76fee847563e3d33f8e6dc6b6d https://git.kernel.org/stable/c/b398cbbbb9dd76210682a8c9aabd34c5168800b9 https://git.kernel.org/stable/c/c4d9b6a0c9645366d9e4af8a6ac8347bd4c841aa https://git.kernel.org/stable/c/ce960a1b2caa4ad08291f28d8bcf17ad5a864e54 https://git.kernel.org/stable/c/e6a395a71f4652261d09b572a03c96052662a056 https://git.kernel.org/stable/c/fb267770bf822064f510c9b46743f533d8fa8a5f