Linux Kernel F2FS Quota NULL Pointer Dereference Vulnerability

A vulnerability in the Linux kernel's F2FS file system quota management has been identified, where improper handling of quota synchronization can lead to a NULL pointer dereference. This issue arises because the loop condition in the quota synchronization function does not correctly pass the active quota type, allowing the compiler to optimize away a crucial check. As a result, a NULL pointer dereference occurs, causing a kernel panic. This vulnerability affects Linux kernel versions 5.4.179-arter97-r8-64666-g2f16e087f9d8.

Impact

Exploitation of this vulnerability leads to a kernel panic, causing a fatal exception that stops all secondary CPUs, which could disrupt system operations and availability.