Linux Kernel NULL Pointer Dereference Vulnerability in Power Supply Sysfs

A NULL pointer dereference vulnerability has been identified in the Linux kernel's handling of power supply sysfs entries, specifically within the USB Type-C UCSI subsystem. This issue arose from a recent commit that introduced a regression by altering error handling in a way that left stale sysfs entries with NULL operations unaddressed. As a result, the power device associated with these entries was not properly released, leading to the NULL dereference.

Impact

Exploitation of this vulnerability causes a NULL pointer dereference, which can lead to a system crash or instability.

Remediation

The vulnerability has been addressed by reverting the problematic commit, restoring the previous error handling that properly managed the sysfs entries.