Linux Kernel s390/pci Device Addition Error Handling Vulnerability

A vulnerability in the Linux kernel's s390/pci subsystem has been addressed. The issue arose because the zpci_create_device() function returns an error pointer that must be checked before it is used as a struct zpci_dev pointer. The missing error check was added in the __clp_add() function, where the device was not properly added to the scan list. This omission could lead to the device being incorrectly managed, allowing for potential exploitation or instability.

Impact

The vulnerability could cause improper device management in the s390/pci subsystem, potentially leading to system instability or exploitation.