Linux Kernel NULL Pointer Dereference Vulnerability in IOMMU OMAP Handling

A NULL pointer dereference vulnerability has been introduced in the Linux kernel's IOMMU OMAP handling. This issue arises from a regression caused by a recent commit that improperly changed the return type of a function, leading the OMAP IOMMU probe to return a success value instead of an error pointer. As a result, certain OMAP variants experience a NULL pointer dereference during the IOMMU device probing process.

Impact

Exploitation of this vulnerability leads to a NULL pointer dereference, causing a crash or denial-of-service condition on the affected system.

Reproduction

The vulnerability can be reproduced by initializing the OMAP IOMMU, which triggers the IOMMU device probing process. The improper return value from the OMAP IOMMU probe function causes a NULL pointer dereference, leading to a system crash.