Linux Kernel NULL Pointer Dereference Vulnerability in IOMMU Mediatek Component

Vulnerability

A NULL pointer dereference vulnerability has been identified in the IOMMU Mediatek component of the Linux kernel. This issue arises because the IOMMU device registration occurs before the hardware list from the driver data is initialized. As a result, when the hardware list is accessed, it leads to a NULL pointer dereference. The vulnerability affects several versions of the Linux kernel.

Impact

Exploitation of this vulnerability causes a NULL pointer dereference, which can lead to a system crash or instability.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.0
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.