Linux Kernel Dell UART Backlight Serdev Race Condition Vulnerability

A vulnerability in the Linux kernel's handling of the Dell UART backlight serdev can lead to a NULL pointer dereference. This issue arises because the 'dell_uart_bl_serdev_probe()' function opens the serdev device before fully initializing the client operations. As a result, the serdev controller's receive buffer handler can encounter a NULL pointer dereference, assuming that the operations are valid when the port is activated. This vulnerability is similar to a previously addressed issue in the Chrome platform's cros_ec_uart handling, where the device was not properly initialized before being opened.

Impact

Exploitation of this vulnerability can lead to a NULL pointer dereference, causing a crash or undefined behavior in the kernel.

Remediation

The vulnerability has been fixed by adjusting the order of operations in the 'dell_uart_bl_serdev_probe()' function. The client operations are now set before the serdev device is opened, preventing the race condition. Users should update to the latest version of the Linux kernel where this fix is applied.