CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's handling of device tree nodes, specifically in the of_pci_range_parser_one() function, where a NULL bus dereference can occur due to improper handling of nodes lacking local #address-cells. This flaw could lead to potential system instability or crashes when iterating over device ranges. Organizations using Linux in environments that rely on device trees for hardware configuration should prioritize addressing this issue to ensure system reliability and prevent unexpected failures.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: of/address: Fix NULL bus dereference in of_pci_range_parser_one() The bus matching rework made of_match_bus() return NULL for nodes with ranges/dma-ranges but no local #address-cells. parser_init() stored that NULL bus, and the range iterator later dereferenced it. Reject such nodes in parser_init(), leaving an explicit empty iterator for callers that ignore the init return, and make of_dma_get_max_cpu_address() honour the init failure so a rejected node cannot clamp the DMA limit.