Executive brief
A vulnerability was identified in the Linux kernel's Greybus staging driver, which handles communication for modular hardware. Under specific low-memory conditions, the system could experience a crash (NULL pointer dereference) when attempting to configure hardware lights. This primarily impacts system stability and availability.
Technical details
A NULL pointer dereference vulnerability exists in drivers/staging/greybus/light.c within the gb_lights_light_config() function. The function was incorrectly storing the 'channel_count' value before successfully allocating the 'channels' array via kcalloc(). If the memory allocation failed, the subsequent cleanup path in gb_lights_release() would attempt to iterate through the channels based on the non-zero count, leading to a dereference of the NULL pointer. An attacker or a system under heavy memory pressure could trigger this crash. The fix reorders the operations to ensure 'channels_count' is only updated after a successful allocation.
Affected products
- Linux Linux Kernel Fixed in versions 01b91cb, 06162d8, 3cbe694, 65f2c60, a118724, ba50221, da46264, efcffd9
Timeline
- 2026-01-08: other: Patch authored
- 2026-05-27: disclosed: NVD publication date
References
- https://git.kernel.org/stable/c/01b91cb3e748032fd96bbe0043812b426a52f091
- https://git.kernel.org/stable/c/06162d85f830582da6e9e5fcf9c9504d6da9ae0b
- https://git.kernel.org/stable/c/3cbe694d235d96f628ec7dc6ae4d8bdddb768699
- https://git.kernel.org/stable/c/65f2c608096d766540953d9b170d216aa3b5eb95
- https://git.kernel.org/stable/c/a118724d7641b832fa14323e2733e28ae4834552
- https://git.kernel.org/stable/c/ba5022162da63059bae36c4fd84d7031f582c71f
- https://git.kernel.org/stable/c/da46264a7016034a5bbbad034c012ef218b7d0af