Linux Kernel Sparx5 Null Pointer Dereference Vulnerability

A potential null pointer dereference vulnerability has been identified in the Linux kernel's handling of Microchip Sparx5 statistics initialization and processing. The issue arises in the 'sparx_stats_init()' function, which creates a single-threaded work queue without checking the return value. If this operation fails, the statistics queue pointer becomes NULL, leading to a null pointer dereference when the work queue is accessed. This vulnerability can be exploited during the execution of the 'sparx5_start()' function, which queues delayed work on the NULL statistics queue, causing a dereference error.

Impact

Exploitation of this vulnerability leads to a null pointer dereference, causing a kernel crash.