Description
In the Linux kernel, the following vulnerability has been resolved: i2c: cp2615: fix serial string NULL-deref at probe The cp2615 driver uses the USB device serial string as the i2c adapter name but does not make sure that the string exists. Verify that the device has a serial number before accessing it to avoid triggering a NULL-pointer dereference (e.g. with malicious devices).
References (7)
Core 7
Core References
Scores
CVSS v3
5.5
EPSS
0.0012
EPSS Percentile
2.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-476
Status
published
Products (25)
linux/Kernel
5.13.0 - 5.15.203linux
linux/Kernel
5.16.0 - 6.1.167linux
linux/Kernel
6.13.0 - 6.18.20linux
linux/Kernel
6.19.0 - 6.19.10linux
linux/Kernel
6.2.0 - 6.6.130linux
linux/Kernel
6.7.0 - 6.12.78linux
Linux/Linux
< 5.13
Linux/Linux
4a7695429eade517b07ea72f9ec366130e81a076 - 13ccf9b106bba121728f1625c4375a1bd8f5c5a3
Linux/Linux
4a7695429eade517b07ea72f9ec366130e81a076 - 4a22af879172336370ae3e81e7f65fb2f69472ee
Linux/Linux
4a7695429eade517b07ea72f9ec366130e81a076 - 69aece634a7eebafd9a596e5494d52facf6f26ec
... and 15 more
Published
Apr 24, 2026
Tracked Since
Apr 24, 2026