Linux Kernel XFRM Module Initialization Vulnerability Leading to Kernel Panic

A vulnerability in the Linux kernel's handling of the XFRM (IPsec) module has been identified. The issue arises because the function 'xfrm4_protocol_init' was incorrectly marked for export and initialization, allowing access to a freed symbol after the initialization process. This mismanagement can lead to a kernel panic. The problem was detected in 'linux-next' builds after the 'modpost' tool was fixed to recognize such issues, which had gone undetected for a decade.

Impact

Accessing a freed symbol can cause a kernel panic, leading to a system crash.