Linux Kernel MediaTek VPU NULL Pointer Dereference Vulnerability

A vulnerability in the Linux kernel's handling of MediaTek VPU platform devices can lead to a NULL pointer dereference. This issue occurs in the 'vpu_load_firmware' function within the MediaTek VPU driver. If the platform device pointer is NULL, it is still dereferenced, causing a potential crash. The vulnerability has been addressed in the Linux kernel stable tree.

Impact

Exploitation of this vulnerability leads to a NULL pointer dereference, causing a kernel crash.

Reproduction

The vulnerability can be reproduced by loading a firmware for a MediaTek VPU platform device with a NULL pointer. This can be done by modifying the VPU driver to pass a NULL platform device pointer to the 'vpu_load_firmware' function.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed.