CVE-2026-98280

In the Linux kernel, the following vulnerability has been resolved: drm/xe/i2c: Disable IRQ on unbind Currently, struct xe_i2c is freed before SGUnit IRQ is disabled in unbind path, leaving a potential UAF in case I2C IRQ is hit during this small window. Explicitly disable I2C IRQ in xe_i2c_remove() and fix this. (cherry picked from commit 8ba5c8b8ab3fd362267c11df2cd5a90ee46f6e24)

Package Linux Kernel
Published 2026-10-06
Last modified 2026-10-06
Patch available
Yes

Affected versions

Linux kernel versions 6.19 and later are affected. Fixed in 7.2.8, 7.3-rc4 and their respective stable series.

Affected from
≥ 6.19
Fixed in
✓ 7.2.8 7.2.x ✓ 7.3-rc4

References

2 total

Frequently asked questions

  • What is CVE-2026-98280?

    CVE-2026-98280 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.19 onward and has been patched in 7.2.8 and 7.3-rc4. CVE-2026-98280 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

  • Is there a patch available for CVE-2026-98280?

    Yes. CVE-2026-98280 has been patched. Fixed versions include 7.2.8 and 7.3-rc4. If you are running Linux kernel 6.19 or later up to the fix versions, apply the relevant patch for your kernel branch.

  • Is CVE-2026-98280 actively exploited?

    No. CVE-2026-98280 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

Back to
All CVEs
View on
NVD / NIST