A flaw in the Linux kernel amd-mp2 driver handling of I2C adapter registration failures creates a high-severity risk of local privilege escalation or system compromise.

The vulnerability is a use after free flaw in the amd_mp2_register_cb function. An attacker with local access can trigger this by causing an i2c_add_adapter failure, which leaves a stale pointer in the PCI driver callback table that is subsequently dereferenced during IRQ or system-sleep events.

The vulnerability carries a CVSS score of 7.8, indicating a high level of risk for local environments. A successful exploit allows an authenticated local user to execute arbitrary code with elevated privileges, potentially leading to a full system compromise, unauthorized data access, or persistent denial of service.

Immediate Action: Apply the latest stable kernel updates provided by your distribution vendor, specifically ensuring the kernel is patched to at least 5.10.265, 5.15.216, 6.1.183, or 6.6.151.

Proactive Monitoring: Monitor system logs for unexpected kernel oops, segmentation faults, or driver-related errors that may indicate an attempt to trigger the race condition or memory corruption.

Compensating Controls: Restrict access to local system resources and hardware interfaces to authorized personnel only, as this vulnerability requires local, authenticated access to the machine.

Public Exploit Available: Unknown

Given the severity of potential privilege escalation, administrators should prioritize updating kernel packages across all affected Linux distributions. Ensure that automated patch management workflows are triggered to deploy the corrected kernel versions as soon as they are released by your upstream vendor.