Linux Kernel Invalid Pointer Dereference Vulnerability in Hibernate PM Component

A vulnerability in the Linux kernel's power management hibernation feature can lead to a kernel crash. This issue arises in versions 6.15 and later when the crypto component for compression is unavailable, causing a function to return an error pointer. The cleanup process then attempts to free a crypto resource without checking for this error, leading to a dereference of an invalid pointer and a kernel crash. The vulnerability is present in the stable Linux kernel.

Impact

Exploitation of this vulnerability causes a kernel crash, disrupting system operations and potentially leading to a denial of service.

Remediation

Users can upgrade to the latest stable version of the Linux kernel to address this vulnerability.