Linux Kernel Out-of-Bounds Access Vulnerability in Module Handling

A vulnerability has been identified in the Linux kernel related to out-of-bounds (OOB) access in module handling. This issue arises when the section string header's size is improperly validated, allowing for the crafting of a module that triggers the OOB access. The vulnerability was observed in version 5.18.0-rc5.

Impact

Exploitation of this vulnerability leads to a page fault, causing a kernel panic and disrupting system operations.

Reproduction

The vulnerability can be reproduced by crafting a kernel module that manipulates the section string header's size. When this module is inserted into the kernel using the 'insmod' command, the improper size validation allows for out-of-bounds access, triggering a page fault and causing a kernel panic.