Linux Kernel Intel Graphics Virtualization Technology VGPU Debugfs Cleanup Vulnerability

A vulnerability in the Linux kernel's handling of Intel Graphics Virtualization Technology (GVT) can lead to a null pointer dereference, causing a kernel crash. This issue arises when a virtual GPU (VGPU) is removed, as the associated debugfs root may have already been deleted. The problem has been observed in Linux kernel versions through 6.1.0-rc2.

Impact

The vulnerability causes a kernel NULL pointer dereference, leading to a system crash.

Reproduction

The vulnerability can be reproduced by removing a virtual GPU that is still registered with the debug filesystem. This can be done by using the 'driverctl' command to unbind a device that has an associated VGPU, which will trigger the NULL pointer dereference and cause a kernel oops.

Remediation

Users can upgrade to the latest stable version of the Linux kernel, where this vulnerability has been addressed.