Linux Kernel Arcnet NULL Pointer Dereference Vulnerability in COM20020PCI Probe Function

A NULL pointer dereference vulnerability has been identified in the Linux kernel's handling of Arcnet devices. The issue arises in the COM20020PCI probe function, which fails to check the return value of the devm_kasprintf() function. This oversight allows for a NULL pointer dereference when memory allocation by devm_kasprintf() fails, potentially leading to a crash or undefined behavior. The vulnerability has been addressed by adding a NULL check after the devm_kasprintf() call to prevent such dereferences and ensure proper resource management.

Impact

Exploitation of this vulnerability leads to a NULL pointer dereference, causing a crash or undefined behavior in the system.