Linux Kernel ftgmac100 NULL Pointer Dereference Vulnerability

A vulnerability in the Linux kernel's ftgmac100 Ethernet driver could lead to a NULL pointer dereference. This issue arises because the netdev->phydev pointer is reset to NULL after disconnecting a physical device, which can cause a subsequent unregistration function to receive a NULL argument. The vulnerability has been addressed by caching the phy_device pointer before it is reset, ensuring that the unregistration function is not called with a NULL value.

Impact

Exploitation of this vulnerability could lead to a NULL pointer dereference, causing a crash or undefined behavior in the kernel.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the official Linux kernel website.