Linux Kernel NBD Module Null Pointer Dereference Vulnerability

A race condition vulnerability has been identified in the Linux kernel's Network Block Device (NBD) module. This issue arises during the module's cleanup process, where the netlink command handling may not synchronize properly with module removal. As a result, this can lead to a null pointer dereference, causing a kernel oops error. The vulnerability was observed in Linux kernel version 5.14.0-rc4.

Impact

Exploitation of this vulnerability leads to a kernel null pointer dereference, causing a kernel oops error, which can disrupt system operations and potentially be exploited to execute arbitrary code in the kernel context.

Reproduction

The vulnerability can be reproduced by loading the NBD kernel module and then rapidly unloading it while a netlink command is being processed. This can create a race condition that the vulnerability exploits, leading to a null pointer dereference.