A race condition in the Linux kernel’s I3C and MIPI I3C HCI driver allows concurrent modification of the device list from normal code paths while the interrupt handler walks that list. Because the handler cannot acquire the bus lock, a thread adding or removing a device can corrupt the list during traversal, potentially causing a use‑after‑free or kernel crash. The weakness comprises race condition and improper resource handling as reflected in CWE-364.

All Linux kernel builds that include the i3c and MIPI I3C HCI driver before the patch commit are affected. This includes every kernel release that compiles these modules and exposes the MIPI I3C HCI path; any system running such a kernel without the fix is impacted.

The vulnerability carries a CVSS score of 7.8 and an EPSS less than 1 %, indicating a low but non‑zero exploitation probability. It is not listed in the CISA KEV catalog. The likely attack vector is a local or privileged adversary that can trigger I3C traffic to cause device addition or removal during an interrupt, leading to a race. If the MIPI I3C HCI feature remains enabled, the risk to system availability is high because a single crash can bring the entire kernel down.