Linux Kernel Cpufreq Longhaul NULL Pointer Dereference Vulnerability

A vulnerability in the Linux kernel's cpufreq longhaul driver could lead to a NULL pointer dereference, causing a kernel warning or panic. This issue arises because the longhaul_exit function calls cpufreq_cpu_get(0) without verifying if the policy pointer is NULL. The vulnerability affects several versions of the Linux kernel.

Impact

Exploitation of this vulnerability can lead to a NULL pointer dereference, causing a kernel warning or panic.

Reproduction

The vulnerability can be reproduced by loading the cpufreq longhaul driver and then unloading it. The longhaul_exit function will be called, which triggers the NULL pointer dereference if the policy is not properly initialized.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.