Linux Kernel Null Pointer Dereference Vulnerability in MHI Bus Endpoint Handling

A null pointer dereference vulnerability has been identified in the Linux kernel's Mobile Hotspot Interface (MHI) bus endpoint management. This issue arises because the channel disconnect status, -ENOTCONN, is sent even when the client driver is not available, leading to a null pointer dereference. The vulnerability is present in the stable versions of the Linux kernel.

Impact

Exploitation of this vulnerability causes a null pointer dereference, which can lead to a system crash or instability.

Reproduction

The vulnerability can be reproduced by sending STOP or RESET commands to an MHI endpoint when the client driver is not available. This will trigger the channel disconnect status -ENOTCONN, causing a null pointer dereference.

Remediation

Users can upgrade to the latest stable version of the Linux kernel, where this vulnerability has been addressed.