The vulnerability occurs in the Linux kernel’s I2C mlxbf driver. During initialization, if devm_platform_get_and_ioremap_resource() fails, mlxbf_i2c_init_resource() frees the temporary resource before attempting to read its I/O address. The code therefore dereferences freed memory, creating a use‑after‑free condition that can be triggered by a local device operator. This bug can cause a kernel crash and, depending on system configuration, may allow manipulation of memory that could elevate privileges.

All Linux kernel builds that include the mlxbf I2C driver are affected. No specific kernel releases or version numbers are listed, so the vulnerability applies broadly to any kernel containing the vulnerable code path.

There is no CVSS score or EPSS rating available and the issue is not listed in the CISA KEV catalog, so quantitative risk is unclear. The exploit appears to require local access to the I2C mlxbf device and the ability to influence the driver’s failure path, suggesting a local, privileged‑level attack vector. At present the most evident risk is a denial of service via kernel crash, but the use‑after‑free nature of the defect means that a more severe compromise cannot be ruled out.