Linux Kernel qede Driver Null Pointer Dereference Vulnerability

A vulnerability in the Linux kernel's qede driver can lead to a null pointer dereference, causing a kernel panic. The issue arises because the function qede_build_skb() assumes that the socket buffer (skb) is always successfully allocated. However, under memory pressure, the allocation can fail, leaving the skb as NULL. The function then proceeds to reserve space in the skb, leading to a panic when it attempts to use a NULL reference. This vulnerability has been addressed by adding a check to ensure that the skb is allocated before use, with the NULL return properly handled in the function's callers.

Impact

Exploitation of this vulnerability causes a kernel panic, disrupting system operations and potentially leading to a denial of service.