Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability exists in the Linux kernel's handling of the Airoha MDIO bus controller. In the 'airoha_mdio_probe()' function, the 'device_node_to_regmap()' call can return an error pointer if the regmap initialization fails. The driver currently stores this pointer without validating it, potentially leading to a crash when the pointer is dereferenced. This issue has been addressed by adding a check for error pointers and returning the appropriate error code, thereby making the probe process more robust.
The vulnerability could lead to a system crash due to an unvalidated pointer being dereferenced, causing a null pointer dereference.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. The specific commit that resolves this issue is 'b2b526c2cf57d14ee269e012ed179081871f45a1', which is included in the Linux kernel stable tree.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.