Linux Kernel NULL Pointer Dereference Vulnerability in DRM Panthor Unplug Handling

A NULL pointer dereference vulnerability has been addressed in the Linux kernel's DRM Panthor driver. The issue arose in the 'panthor_fw_unplug' function, where the code attempted to halt the microcontroller unit (MCU) before unplugging. This approach was problematic because the MCU could be in various states, or the firmware might not be loaded or initialized, leading to a NULL pointer dereference. The patch removes the unnecessary halt procedures and simply disables the MCU during the unplug process, preventing the error.

Impact

Exploitation of this vulnerability could lead to a system crash or instability due to the NULL pointer dereference, causing the kernel to attempt to access an invalid memory location.

Remediation

Users can apply the patch available in the Linux kernel stable tree to address this vulnerability. The patch can be downloaded as part of the Linux kernel source.