Linux Kernel SCSI UFS MCQ NULL Pointer Dereference Vulnerability

A vulnerability in the Linux kernel's SCSI UFS MCQ handling has been addressed. A race condition could lead to a NULL pointer dereference, causing a kernel crash. This issue arises when a request completes and the associated request structure is freed, leaving the abort handler with a NULL pointer. The vulnerability has been mitigated by adding a NULL check in the abort function, logging an error and returning a failure status if a NULL pointer is detected. This fix is similar to a previous correction for a related racing issue in UFS command handling.

Impact

Exploitation of this vulnerability could lead to a kernel crash due to a NULL pointer dereference.