Linux Kernel NULL Pointer Dereference Vulnerability in DRM GEM DMA Handling

A NULL pointer dereference vulnerability has been identified in the Linux kernel's Direct Rendering Manager (DRM) GEM (Graphics Execution Manager) DMA handling. This issue arises because the dma_buf field in the drm_gem_object structure is not stable throughout the object's lifetime. When the user space releases the final GEM handle on a buffer object, the dma_buf field becomes NULL, leading to a NULL-pointer dereference. Although workarounds were introduced, they only partially addressed the issue and do not work for buffer objects without an associated DRM framebuffer.

Impact

Exploitation of this vulnerability leads to a NULL pointer dereference, causing a crash or undefined behavior in the kernel.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.