Linux Kernel LAN966X Null Pointer Dereference Vulnerability

A potential null pointer dereference vulnerability has been identified in the Linux kernel's LAN966X Ethernet driver. The issue arises in the function 'lan966x_stats_init()', which calls 'create_singlethread_workqueue()' without checking the return value. If the workqueue creation fails, 'lan966x->stats_queue' becomes NULL, leading to a null pointer dereference when 'queue_delayed_work()' is called. This vulnerability could cause a kernel crash or other unintended behavior.

Impact

Exploitation of this vulnerability can lead to a null pointer dereference, causing a kernel crash or other unexpected behavior.