Linux Kernel NULL Pointer Dereference Vulnerability in MOST I2C Driver

A vulnerability has been identified in the Linux kernel's MOST I2C driver, which has been non-functional for five years. The issue arises from the driver not updating its interface device pointer before registration, leading to a NULL pointer dereference when the driver is probed. This vulnerability affects the Linux kernel staging area, specifically the MOST I2C driver.

Impact

Exploitation of this vulnerability leads to a NULL pointer dereference, causing a crash or denial of service condition.

Remediation

The vulnerability has been addressed by removing the broken I2C driver from the Linux kernel staging area. Users can apply the latest patches from the Linux kernel stable tree to mitigate this issue.