Linux Kernel MTD Intel Rawnand Null Pointer Dereference Vulnerability

A null pointer dereference vulnerability has been identified in the Linux kernel's MTD (Memory Technology Device) subsystem, specifically within the Intel Rawnand driver. The issue arises in the 'ebu_nand_probe()' function when 'platform_get_resource()' returns NULL. This oversight can lead to a null pointer dereference by improperly using the 'res' variable before it is validated. The vulnerability has been addressed by rearranging the code to ensure 'res' is only used after 'devm_ioremap_resource()' has confirmed its validity, thus preventing the null pointer dereference.

Impact

Exploitation of this vulnerability can lead to a null pointer dereference, causing a kernel crash.