Linux Kernel NULL Pointer Dereference Vulnerability in DSA VLAN Filtering

A NULL pointer dereference vulnerability has been identified in the Linux kernel's Distributed Switch Architecture (DSA) component. The issue arises in the 'dsa_port_reset_vlan_filtering' function, where the 'ds' iterator variable overwrites the 'dp' argument. This flaw leads to an invalid dereference in switches with global VLAN filtering enabled, after they have exited a VLAN-aware bridge. The vulnerability has been addressed by introducing a separate iterator variable to prevent the overwrite.

Impact

Exploitation of this vulnerability could lead to a NULL pointer dereference, causing a kernel crash or other undefined behavior.