Linux Kernel Udmabuf Page Count Validation Vulnerability Leading to General Protection Fault

A vulnerability in the Linux kernel's udmabuf implementation has been identified, where improper validation of user-supplied page count data can lead to a general protection fault. The issue arises because the page count is calculated from arguments provided by the user. If a user creates a udmabuf with a list size of zero, the resulting page count will also be zero. This condition causes the kmalloc_array() function to return a null pointer, leading to a general protection fault. The vulnerability has been addressed by adding validation to ensure the page count is greater than zero before passing it to kmalloc_array().

Impact

Exploitation of this vulnerability can cause a general protection fault, disrupting system operations and potentially leading to a denial of service.