Linux Kernel CAN Stack NULL Pointer Dereference Vulnerability in IRQ Context

A vulnerability in the Linux kernel's CAN network stack can lead to a NULL pointer dereference. This issue arises when a driver calls 'can_get_echo_skb()' during a hardware interrupt, which can trigger a warning and, under certain network congestion conditions, cause a NULL pointer dereference. The root cause is improper handling of socket buffer (skb) memory management in the presence of hardware interrupts. The vulnerability affects the CAN stack, which is an exception to the usual rule that loopback socket buffers should not be processed during hardware interrupts.

Impact

Exploiting this vulnerability can lead to a NULL pointer dereference, causing a kernel crash.