Linux Kernel NULL Pointer Dereference Vulnerability in QCOM QMP USB Handling

A vulnerability in the Linux kernel's handling of USB mappings for Qualcomm QMP can lead to a NULL pointer dereference. The issue arises because the 'qmp_usb_iomap()' function returns the raw output of 'devm_ioremap()' for non-exclusive mappings. Since 'devm_ioremap()' can return a NULL pointer, and the subsequent error check only identifies pointers marked as errors, a NULL return could be incorrectly processed, allowing for an invalid memory access. This vulnerability has been addressed by modifying 'qmp_usb_iomap()' to return an error pointer when 'devm_ioremap()' returns NULL, ensuring proper error management.

Impact

Exploitation of this vulnerability can lead to a NULL pointer dereference, causing a crash or undefined behavior in the kernel.