Linux Kernel Null Pointer Dereference Vulnerability in USB PHY Sunplus Driver

A null pointer dereference vulnerability has been identified in the USB PHY Sunplus driver of the Linux kernel. The issue arises in the function 'sp_usb_phy_probe()', which calls 'platform_get_resource_byname()'. If this call fails, it returns NULL, leading to a potential null pointer dereference when 'devm_ioremap()' uses 'usbphy->moon4_res_mem->start' as input. The vulnerability can be exploited by checking the return value of 'platform_get_resource_byname()' to prevent the null pointer dereference.

Impact

Exploitation of this vulnerability can lead to a null pointer dereference, causing a kernel crash.