Linux Kernel Chips Media Wave5 Null Dereference Vulnerability

A null pointer dereference vulnerability has been addressed in the Linux kernel's media chips for the Wave5 decoder. This issue arose because the 'vpu_instance' structure, shared across the decoder's workflow, was not properly protected by locks. During the creation and destruction of multiple instances, unprotected access led to occasional null dereferences. The vulnerability has been mitigated by splitting the interrupt request (IRQ) handling into two phases and introducing appropriate locking mechanisms.

Impact

Exploitation of this vulnerability could lead to a null pointer dereference, causing a crash or undefined behavior in the kernel.