Linux Kernel USB Serial Quatech2 Null Pointer Dereference Vulnerability

A null pointer dereference vulnerability has been fixed in the Linux kernel's USB serial Quatech2 driver. The issue arose in the function 'qt2_process_read_urb()' due to an improper bounds check. The original condition failed to consider the valid range of the 'serial->port' buffer, leading to an out-of-bounds access when 'newport' equaled 'serial->num_ports'. This out-of-bounds access caused the 'port' variable to be assigned a NULL value, creating the potential for a null pointer dereference.

Impact

Exploitation of this vulnerability could lead to a null pointer dereference, causing a crash or undefined behavior in the kernel.