Linux Kernel DPLL Device Change Notification Race Condition Vulnerability

A race condition vulnerability has been identified in the Linux kernel's DPLL (Digital Phase-Locked Loop) subsystem, specifically within the zl3073x driver. This vulnerability arises from the improper handling of device change notifications, which could lead to dereferencing a freed or null pointer during device teardown. The issue has been resolved by eliminating the change_work infrastructure and directly using the __dpll_device_change_ntf() function, which is now available for callers that hold the appropriate lock.

Impact

Exploitation of this vulnerability could lead to a race condition, allowing for the potential dereferencing of a freed or null pointer, which could cause a crash or other unintended behavior in the kernel.