Linux Kernel Null Pointer Dereference Vulnerability in AMD Display Driver

A potential null pointer dereference vulnerability has been identified in the Linux kernel's AMD display driver. The issue arises in the 'amdgpu_dm_fini()' function, where the 'adev->dm.dc' pointer can be NULL and is dereferenced without prior validation. This vulnerability has been addressed by adding a NULL pointer check before calling 'dc_dmub_srv_destroy()'. The flaw was discovered by the Linux Verification Center using the SVACE analysis tool.

Impact

Exploitation of this vulnerability could lead to a null pointer dereference, causing a crash or undefined behavior in the kernel.

Reproduction

The vulnerability can be reproduced by invoking the 'amdgpu_dm_fini()' function without ensuring that the 'adev->dm.dc' pointer is valid. This scenario can occur during the cleanup process of the AMD display driver when the 'dc' pointer is NULL.

Remediation

Users can upgrade to the patched version of the Linux kernel available in the Linux Kernel Stable Patches repository.