Linux Kernel Remoteproc PRU NULL Pointer Dereference Vulnerability

Vulnerability

A potential NULL pointer dereference vulnerability has been identified in the Linux kernel's remoteproc PRU subsystem. The issue arises in the function 'pru_rproc_set_ctable()', which accesses 'rproc->priv' before performing a proper NULL check. This oversight could lead to a NULL pointer dereference. The vulnerability has been addressed by rearranging the code to ensure that a NULL 'rproc' pointer is never dereferenced.

Impact

Exploitation of this vulnerability could lead to a NULL pointer dereference, causing a crash or undefined behavior in the system.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the official Linux kernel website.

Added: Oct 28, 2025, 1:21 PM
Updated: Oct 28, 2025, 1:21 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.3
remediation
7.7
relevance
0.9
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.