Linux Kernel GPIO Chip IRQ Initialization Race Condition Vulnerability

A race condition vulnerability has been identified in the Linux kernel's GPIO (General Purpose Input/Output) subsystem. This issue arises because the IRQ (interrupt request) members of GPIO chips are exposed before they are fully initialized, leading to potential NULL pointer dereferences in the kernel. The vulnerability was observed when the 'gc->irq.domain' variable was accessed via the I2C interface, before it could be properly initialized by the 'gpiochip_add_irqchip()' function. This premature access created a race condition, allowing for a NULL pointer dereference in the kernel.

Impact

Exploitation of this vulnerability leads to a NULL pointer dereference in the kernel, causing a crash or denial of service.