Linux Kernel Xen Netback NULL Pointer Dereference Vulnerability

A vulnerability in the Linux kernel's Xen netback component can lead to a NULL pointer dereference, causing a crash. The issue arises in the 'xenvif_rx_next_skb()' function, which expects the receive (rx) queue to contain data. However, if 'xenvif_rx_action()' iterates multiple times without checking the rx queue's status, it can result in a crash by attempting to access an empty queue. This vulnerability has been observed in the 4.12.14-122.121-default version on SUSE Linux Enterprise Server 12 SP5.

Impact

Exploitation of this vulnerability leads to a kernel crash due to a NULL pointer dereference, causing a denial of service.