Linux Kernel Lontium LT9611 GPU NULL Pointer Dereference Vulnerability

A NULL pointer dereference vulnerability has been identified in the Linux kernel's GPU bridge driver for the Lontium LT9611. This issue arises in the 'lt9611_connector_init' function, where the 'bridge->encoder' pointer is checked for NULL. However, it has already been dereferenced on all paths leading to the check, creating a potential for a NULL pointer dereference.

Impact

Exploitation of this vulnerability leads to a NULL pointer dereference, which can cause a system crash or instability.

Reproduction

The vulnerability can be reproduced by initializing a connector for the Lontium LT9611 GPU bridge without a valid encoder. The 'lt9611_connector_init' function will then attempt to attach the encoder to the connector, resulting in a NULL pointer dereference if the encoder is not properly set.

Remediation

Users can upgrade to the patched version of the Linux kernel available in the Linux Kernel Archive.