Linux Kernel EDAC Igen6 NULL Pointer Dereference Vulnerability

A NULL pointer dereference vulnerability has been identified in the Linux kernel's EDAC Igen6 driver. This issue leads to a kernel panic, as the driver attempts to access a disabled memory controller, causing a page fault. The vulnerability arises because the driver checks all memory controllers for errors, including those that are not present, which results in accessing a NULL memory-mapped I/O address.

Impact

Exploitation of this vulnerability causes a kernel panic, disrupting system operations and potentially leading to a denial of service.

Remediation

The vulnerability has been addressed by modifying the driver to accurately reflect the number of detected memory controllers, preventing the NULL pointer dereference. Users should update to the latest version of the Linux kernel where this fix is applied.