In the Linux kernel, the following vulnerability has been resolved: i2c: i801: fix hardware state machine corruption in error path A severe livelock and subsequent Hung Task panic were observed in the i2c-i801 driver during concurrent Fuzzing. The crash is caused by an unconditional hardware register cleanup in the error handling path of i801_access(). When i801_check_pre() fails (e.g., returning -EBUSY because the SMBus controller is actively used by BIOS/ACPI), the kernel does not actually acquire the hardware ownership. However, the code jumps to the 'out' label and executes: iowrite8(SMBHSTSTS_INUSE_STS | STATUS_FLAGS, SMBHSTSTS(priv)); This forcefully clears the INUSE_STS lock and resets the hardware status flags without owning the controller. Doing so interrupts ongoing BIOS/ACPI transactions and totally corrupts the SMBus hardware state machine. Consequently, all subsequent i801_access() calls fail at the pre-check stage, triggering an endless stream of "SMBus is busy, can't use it!" error logs. Over a slow serial console, this printk flood monopolizes the CPU (Console Livelock), starving other processes trying to acquire the mmap_lock down_read semaphore, ultimately triggering the hung task watchdog. Fix this by moving the 'out' label below the hardware register cleanup. If i801_check_pre() fails, we safely bypass the iowrite8() and only release the software locks (pm_runtime and mutex), strictly adhering to the rule of not releasing resources that were never acquired.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6415 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6415-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     August 06, 2026                       https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2025-40098 CVE-2026-45897 CVE-2026-45901 CVE-2026-53078                      CVE-2026-53090 CVE-2026-64205 CVE-2026-64280 CVE-2026-64290                      CVE-2026-64561 CVE-2026-64562 CVE-2026-64563 CVE-2026-64564                      CVE-2026-64565 CVE-2026-64567 CVE-2026-64568 CVE-2026-64569                      CVE-2026-64570 CVE-2026-64571 CVE-2026-64572 CVE-2026-64573                      CVE-2026-64574 CVE-2026-64576 CVE-2026-64577 CVE-2026-64578                      CVE-2026-64579 CVE-2026-64580 CVE-2026-64583 CVE-2026-64584     Debian Bug     : 1143721

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the stable distribution (trixie), these problems have been fixed in     version 6.12.101-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - i2c: i801: fix hardware state machine corruption in error path A severe livelock and subsequent Hung Task     panic were observed in the i2c-i801 driver during concurrent Fuzzing. The crash is caused by an     unconditional hardware register cleanup in the error handling path of i801_access(). When i801_check_pre()     fails (e.g., returning -EBUSY because the SMBus controller is actively used by BIOS/ACPI), the kernel does     not actually acquire the hardware ownership. However, the code jumps to the 'out' label and executes:
    iowrite8(SMBHSTSTS_INUSE_STS | STATUS_FLAGS, SMBHSTSTS(priv)); This forcefully clears the INUSE_STS lock     and resets the hardware status flags without owning the controller. Doing so interrupts ongoing BIOS/ACPI     transactions and totally corrupts the SMBus hardware state machine. Consequently, all subsequent     i801_access() calls fail at the pre-check stage, triggering an endless stream of SMBus is busy, can't use     it! error logs. Over a slow serial console, this printk flood monopolizes the CPU (Console Livelock),     starving other processes trying to acquire the mmap_lock down_read semaphore, ultimately triggering the     hung task watchdog. Fix this by moving the 'out' label below the hardware register cleanup. If     i801_check_pre() fails, we safely bypass the iowrite8() and only release the software locks (pm_runtime     and mutex), strictly adhering to the rule of not releasing resources that were never acquired.
    (CVE-2026-64205)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
333110	Debian dsa-6415 : ata-modules-6.12.100+deb13-armmp-di - security update	Nessus	Debian Local Security Checks	Local	medium
328349	Linux Distros Unpatched Vulnerability : CVE-2026-64205	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-64205

medium

Tenable Plugins

medium

medium