Linux Kernel Null Pointer Dereference Vulnerability in Video Framebuffer Driver

A null pointer dereference vulnerability has been identified in the Linux kernel's video framebuffer device (fbdev) subsystem, specifically within the smscufx driver. The issue arises in the 'ufx_usb_probe' function, where the framebuffer color map allocation can fail. If this happens, the error handling routine attempts to destroy the framebuffer modelist, which has not been properly initialized, leading to a null pointer dereference.

Impact

Exploitation of this vulnerability causes a kernel panic due to a null pointer dereference, which can lead to a denial of service by crashing the system.