Linux Kernel NULL Pointer Dereference Vulnerability in DRM/TTM Component

A vulnerability allowing a NULL pointer dereference has been identified in the Linux kernel's DRM/TTM component. This issue arises from the LRU mechanism potentially accessing a resource that is in the process of being removed from an object. The current locking rules create a conflict, as the 'res->bo' assignment is safeguarded by the LRU lock, while 'bo->resource' relies on the object lock. Additionally, clearing 'bo->resource' is also LRU lock-protected. This misalignment can lead to a situation where 'bo->resource' is NULL when dereferenced in 'ttm_bo_swapout()', causing a crash.

Impact

Exploitation of this vulnerability leads to a NULL pointer dereference, causing a system crash.