Linux Kernel NULL Pointer Dereference Vulnerability in DRM GUD on USB Disconnect

A vulnerability in the Linux kernel's Direct Rendering Manager (DRM) Generic USB Display) component can lead to a NULL pointer dereference. This issue occurs when a USB display is disconnected, as the atomic helper function used to disable all displays sets the framebuffer and the display controller to NULL. The absence of proper checks before accessing these NULL values causes a kernel oops, or crash, every time a display is disconnected. This vulnerability affects Linux kernel versions 6.18.x.

Impact

The vulnerability causes a kernel oops, leading to a system crash, every time a USB display is disconnected.

Remediation

Users can upgrade to the latest version of the Linux kernel to address this vulnerability. The patched version is available in the Linux kernel stable tree.