Linux Kernel NULL Pointer Dereference Vulnerability in DRM GEM Framebuffer Handling

A NULL pointer dereference vulnerability has been identified in the Linux kernel's Direct Rendering Manager (DRM) Graphics Execution Manager (GEM) framebuffer handling. This issue arises because the dma_buf field in the drm_gem_object structure is not stable throughout the object's lifetime. When the user space releases the final GEM handle on a buffer object, the field can become NULL, leading to a dereference of a NULL pointer. Although workarounds were attempted, they only partially addressed the issue and do not work for buffer objects without an associated DRM framebuffer.

Impact

Exploitation of this vulnerability leads to a NULL pointer dereference, causing a crash or undefined behavior in the kernel.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. Instructions for upgrading can be found in the official Linux kernel documentation.