Linux Kernel NULL Pointer Dereference Vulnerability in FF-A Driver Registration

A vulnerability in the Linux kernel's handling of firmware drivers using the ARM Fast Functionality Architecture (FF-A) has been addressed. The issue arose because the bus match callback expected every FF-A driver to provide an ID table, which it accessed without checking for null values. This oversight could allow a faulty driver to crash the bus during the matching process. The vulnerability affects the Linux kernel stable tree.

Impact

The vulnerability could lead to a null pointer dereference, causing a system crash.

Reproduction

The vulnerability can be reproduced by registering an FF-A driver that does not provide a valid ID table. The bus match callback will attempt to dereference the null ID table, leading to a crash.

Remediation

Users can upgrade to the latest version of the Linux kernel stable tree, where this vulnerability has been fixed.