The rtl2832 driver in the Linux kernel contains a race condition that can lead to a use‑after‑free when the device is removed while an I2C transfer is still in progress. During probe, the driver performs I2C operations through a mux adapter that schedules delayed work. If rtl2832_remove() is called before i2c_mux_del_adapters(), the scheduled work can be re‑injected after the work has been cancelled, causing a dereference of freed memory. Based on the description, it is inferred that an attacker who can initiate I2C transfers or trigger device removal can bring the kernel memory corruption into play. The consequence of a successful exploitation is arbitrary code execution at kernel privilege, which can lead to full system compromise. This flaw is a classic use‑after‑free vulnerability (CWE-416).

Any system running a Linux kernel in which the rtl2832 media driver is compiled and the device is present. The driver is part of the generic media subsystem and is typically enabled in stock distributions. No specific kernel version range is listed, so the issue exists until the patch that reorders the cleanup steps is applied.

The CVSS score is 4.7, indicating a moderate severity. The EPSS score is < 1%, suggesting the likelihood of exploitation is very low. The vulnerability is not listed in the CISA KEV catalog, indicating no publicly known widespread exploitation as of now. Based on the description, it is inferred that exploitation requires local access to the rtl2832 device or a process that can invoke I2C transfers on the device, which may be possible if the device is exposed to user‑space or untrusted code. Kernel memory corruption bugs carry high inherent risk, and the lack of publicly available exploit information does not reduce the need for remediation. Given the potential for arbitrary kernel code execution, the risk remains significant, especially on systems exposed to untrusted users or network traffic that can reach the rtl2832 device.