Linux Kernel AXP288 Fuel Gauge External Power Change Race Condition Vulnerability

A race condition vulnerability has been identified in the AXP288 fuel gauge driver of the Linux kernel. This issue arises because the 'external_power_changed' callback can be invoked before the 'bat' field is properly initialized, leading to a NULL pointer dereference. The vulnerability is present in the stable versions of the Linux kernel.

Impact

Exploitation of this vulnerability causes a NULL pointer dereference, which can lead to a system crash.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the official Linux kernel website.