Linux Kernel NULL Pointer Dereference Vulnerability in Intel DRM Subsystem

A vulnerability allowing a NULL pointer dereference has been identified in the Linux kernel's Intel Direct Rendering Manager (DRM) subsystem, specifically within the i915 graphics driver. This issue arises because the function 'intel_atomic_get_new_crtc_state' can return NULL if the current state was not previously retrieved with 'intel_atomic_get_crtc_state'. The vulnerability exists in several versions of the Linux kernel.

Impact

Exploitation of this vulnerability leads to a NULL pointer dereference, causing a crash or undefined behavior in the kernel.

Reproduction

The vulnerability can be reproduced by triggering a scenario where 'intel_atomic_get_new_crtc_state' is called without prior state retrieval, leading to a NULL pointer dereference. This can occur during the handling of plane state in the Intel DRM subsystem.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.