Linux Kernel NULL Pointer Dereference Vulnerability in aspeed LPC Snoop Function

A NULL pointer dereference vulnerability has been identified in the Linux kernel's aspeed LPC snoop function. The issue arises because the function aspeed_lpc_enable_snoop() does not validate the return value of devm_kasprintf(), which can be NULL if memory allocation fails. This oversight leads to a NULL pointer dereference. The vulnerability has been addressed by adding a NULL check after the devm_kasprintf() call.

Impact

Exploitation of this vulnerability leads to a NULL pointer dereference, causing a crash or undefined behavior in the kernel.