CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's ACPI NFIT implementation, where a NULL pointer dereference can occur if the NFIT table is absent when a notification is triggered. This flaw could lead to system crashes or instability if exploited through platform firmware notifications. Linux system administrators and developers should prioritize this issue to ensure system reliability and prevent potential denial-of-service scenarios.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix possible NULL pointer dereference After commit 9b311b7313d6 ("ACPI: NFIT: Install Notify() handler before getting NFIT table"), acpi_nfit_probe() installs an ACPI notify handler for the NFIT device before checking the presence of the NFIT table. If that table is not there, 0 is returned without allocating the acpi_desc object and setting the driver data pointer of the NFIT device. If the platform firmware triggers an NFIT_NOTIFY_UC_MEMORY_ERROR notification on the NFIT device at that point, acpi_nfit_uc_error_notify() will dereference a NULL pointer. Prevent that from occurring by adding an acpi_desc check against NULL to acpi_nfit_uc_error_notify().