CVE-2026-23055

CVE-2026-23055 addresses a vulnerability in the Linux kernel's Renesas I2C driver, specifically affecting devices like the RZ/G3E. The flaw allows I2C transfers to occur while the controller is suspended, leading to system warnings and potential operational issues. This issue arises from incorrect ordering of system sleep callbacks, preventing proper I2C controller availability during suspend and resume cycles. The vulnerability has no assigned CVSS score but carries a FAUCET Risk Score of 17/100, indicating a low to moderate severity. The attack vector is internal to the kernel's suspend/resume process, making direct external exploitation unlikely. The primary impact is system instability and potential device malfunction during power management states, rather than direct data compromise or privilege escalation. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability. It is not listed in the CISA KEV catalog and has not received media coverage, suggesting a low current threat profile.