Linux Kernel Intel Ice Driver NULL Pointer Dereference Vulnerability

A vulnerability in the Linux kernel's Intel Ice driver can lead to a NULL pointer dereference. This issue arises after the Ice driver is removed following a failed hardware initialization, which occurs because the driver does not properly release control of its resources. The problem was introduced by a previous commit that removed a necessary cleanup step, causing the driver to fail when reinitialized via the devlink interface. The vulnerability affects the Linux kernel stable tree.

Impact

The vulnerability can be exploited to cause a NULL pointer dereference, leading to a crash of the affected system or application.

Reproduction

The vulnerability can be reproduced by reloading the devlink interface for a device using the Intel Ice driver. This process will fail to properly initialize the device's hardware, and subsequently removing the driver will trigger a NULL pointer dereference, causing a system crash.

Remediation

Users can apply the latest patch available in the Linux kernel stable tree to address this vulnerability.