Linux Kernel NULL Pointer Dereference Vulnerability in hwmon Driver

A vulnerability exists in the Linux kernel's hwmon driver for the Congatec Board Controller. The issue arises because the driver allocates memory for sensor data using the devm_kzalloc() function without verifying if the allocation was successful. This oversight can lead to a kernel crash if the allocated memory is NULL and subsequently dereferenced. The vulnerability affects the stable version of the Linux kernel.

Impact

The vulnerability can be exploited to cause a kernel crash by dereferencing a NULL pointer, leading to a denial of service.

Remediation

Users can apply the latest patch available in the Linux kernel stable tree, which adds the necessary NULL pointer check and properly handles memory allocation failures. Instructions for downloading this patched version can be found in the Linux kernel Git repository.