Linux Kernel CXL/PMEM NVDIMM Registration Race Condition Vulnerability

A race condition vulnerability in the Linux kernel's CXL/PMEM component can lead to a NULL pointer dereference. This issue occurs during the asynchronous registration of NVDIMM devices, where the CXL context required by the 'cxl_pmem_ctl' function has already been torn down, causing a crash. The vulnerability affects the Linux kernel's stable releases.

Impact

Exploitation of this vulnerability causes a kernel crash due to a NULL pointer dereference, disrupting system operations and potentially leading to a denial of service.

Reproduction

The vulnerability can be reproduced by loading and unloading the 'cxl_pci' module in a continuous loop. This process interferes with the asynchronous registration of NVDIMM devices, causing a crash when the 'cxl_pmem_ctl' function is called.

Remediation

The vulnerability has been addressed in the Linux kernel. Users should upgrade to the latest version.