Linux Kernel NULL Pointer Dereference Vulnerability in CPU Topology Parsing

A vulnerability in the Linux kernel's CPU topology parsing function can lead to a NULL pointer dereference. This issue arises from an incorrect error check that allows the code to proceed with NULL clock pointers, potentially causing a crash. The vulnerability is present in the stable branch of the Linux kernel.

Impact

Exploitation of this vulnerability can cause a system crash due to a NULL pointer dereference, disrupting normal operations.

Reproduction

The vulnerability can be reproduced by invoking the 'topology_parse_cpu_capacity' function with a device node that simulates a CPU. The function will incorrectly process a NULL clock pointer, leading to a dereference error.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.