The vulnerability in the Linux kernel's i2c core involved a race condition during adapter deregistration. Adapters can be looked up by their ID using i2c_get_adapter(), which holds a reference to the embedded struct device. Previously, the adapter was not removed from the IDR before teardown, allowing its resources, such as the device name, to be accessed after being freed. The patch removes the adapter from the IDR prior to teardown to prevent such use-after-free access.

This vulnerability could lead to use-after-free conditions where kernel resources are accessed after being freed, potentially causing kernel instability or crashes. No known exploits in the wild have been reported. The impact is limited to kernel-level resource management within the i2c subsystem.

A fix has been implemented in the Linux kernel to address this race condition by removing the adapter from the IDR before teardown during deregistration. Users should apply the official kernel updates that include this fix. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor or kernel mailing list advisories for the current remediation guidance.