Linux Kernel Power Supply CPCAP Charger Null Pointer Dereference Vulnerability

A vulnerability in the Linux kernel's power supply CPCAP charger driver could lead to a null pointer dereference. The issue arises in the 'cpcap_usb_detect()' function, where the 'power_supply_get_by_name()' function may return NULL instead of an error pointer. This vulnerability affects the Linux kernel stable tree.

Impact

Exploitation of this vulnerability can lead to a null pointer dereference, causing a potential denial of service by crashing the system or application that uses the affected driver.

Reproduction

The vulnerability can be reproduced by invoking the 'cpcap_usb_detect()' function in the power supply CPCAP charger driver. This function will attempt to retrieve the battery power supply information. If the 'power_supply_get_by_name()' function returns NULL, the driver will not handle this correctly, leading to a null pointer dereference.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.