cve-2026-31549

CVE-2026-31549 is a Linux kernel vulnerability in the Silicon Labs CP2615 I2C driver (i2c-cp2615). The issue arises during device probing when the driver uses the USB device's serial string as the I2C adapter name without verifying its existence. If a CP2615-compatible USB device lacks a serial number, the driver may dereference a NULL pointer, leading to a kernel panic. This tag covers discussions, analysis, and mitigation strategies for CVE-2026-31549, including its impact on Linux systems and potential workarounds. While the vulnerability is specific to Linux, it may affect systems running Windows Subsystem for Linux or virtualized environments.