Linux Kernel NULL Pointer Dereference Vulnerability in USB Gadget Driver

A vulnerability in the Linux kernel's USB gadget driver can lead to a NULL pointer dereference. This issue arises because the driver improperly resets the 'bus' entry of the gadget's driver, interfering with the gadget subsystem's new bus management. The vulnerability has been observed in the 'dwc2' USB gadget driver on ARM architectures, particularly in Samsung Exynos devices, with the issue triggered during the module loading process.

Impact

Exploitation of this vulnerability causes a kernel NULL pointer dereference, leading to a system crash.

Reproduction

The vulnerability can be reproduced by loading the 'dwc2' USB gadget driver module using 'modprobe'. This process will trigger the NULL pointer dereference error, causing an 'Oops' kernel error, which indicates a serious issue that the kernel was unable to handle gracefully.