Linux Kernel NULL Pointer Dereference Vulnerability in mv88e6060 DSA Switch Driver

A NULL pointer dereference vulnerability has been identified in the Linux kernel's mv88e6060 DSA switch driver. This issue occurs in versions of the Linux kernel where the mv88e6060 switch driver is used. The vulnerability arises when a port is neither a CPU port nor a user port, leading to a NULL pointer in the 'cpu_dp' variable. This NULL pointer dereference can cause a kernel crash.

Impact

Exploitation of this vulnerability leads to a kernel crash due to a NULL pointer dereference.

Reproduction

The vulnerability can be reproduced by configuring a DSA switch with an unused port that is neither a CPU port nor a user port. When the switch driver attempts to set up the port, it will dereference the NULL pointer, causing a kernel crash.