The vulnerability allows a kernel use‑after‑free when the amd‑mp2 driver registers an I2C adapter. The driver stores a platform I2C context before the adapter registration succeeds. If i2c_add_adapter() fails, the probe returns and the context is freed, yet the driver’s IRQ and sleep callbacks may still dereference the stale pointer. This stale reference can corrupt kernel memory or cause a crash, potentially allowing an attacker to execute arbitrary code with kernel privileges.

All Linux kernel installations that include the amd‑mp2 PCI driver and I2C subsystem. No specific kernel version is listed in the data, so any kernel containing the affected code path is at risk.

The exploit requires the ability to load the amd‑mp2 driver and trigger an adapter add that fails. This is a local kernel code execution vector; an attacker who can run privileged kernel code can take advantage of the use‑after‑free to gain higher privileges or crash the system. EPSS data is unavailable, and the vulnerability is not listed in the CISA KEV catalog. The CVSS score is not provided, but use‑after‑free in the kernel typically rates as high severity. The attack path relies on a failed adapter registration which is a scenario that can occur during driver initialization or dynamic device probing.