Linux Kernel WiFi Subsystem Null Pointer Dereference Vulnerability in Carl9170 Driver

A null pointer dereference vulnerability has been identified in the Linux kernel's WiFi subsystem, specifically within the carl9170 driver. This issue arises when the system attempts to ping a device that has failed to load its firmware. Such a device does not complete the hardware registration process, which means an internal work queue is not yet available. As a result, any attempt to queue work for the device leads to a null pointer dereference, causing a crash.

Impact

Exploitation of this vulnerability leads to a null pointer dereference, causing a crash of the affected system.