Linux Kernel USB ACPI Null Pointer Dereference Vulnerability

A null pointer dereference vulnerability has been identified in the Linux kernel's USB ACPI handling. The issue arises in the function 'usb_acpi_add_usb4_devlink()', where 'usb_hub_to_struct_hub()' can return NULL under certain conditions, such as during hub driver unbinding or teardown race conditions. This NULL return is not checked in 'usb_acpi_add_usb4_devlink()', leading to a dereference of a NULL pointer when accessing hub port data, causing a crash. Other invocations of 'usb_hub_to_struct_hub()' in the same file do include NULL checks, highlighting an inconsistency in error handling.

Impact

Exploitation of this vulnerability leads to a null pointer dereference, causing a kernel crash.