Linux Kernel Kprobe Null Pointer Dereference Vulnerability

A null pointer dereference vulnerability has been identified in the Linux kernel's kprobe tracing mechanism. This issue arises in the 'kprobe_event_gen_test_exit()' function, where a failure in 'test_gen_kprobe_cmd()' can lead to the deletion of a kprobe event. Consequently, the 'trace_array' pointer in 'gen_kretprobe_test' may reference an invalid resource, causing a kernel null pointer dereference. The vulnerability has been observed in Linux kernel version 6.1.0-rc1.

Impact

Exploitation of this vulnerability leads to a kernel null pointer dereference, causing a crash.

Reproduction

The vulnerability can be reproduced by loading a kprobe that fails during command generation, which triggers a deletion process that improperly handles the 'trace_array' reference, leading to a null pointer dereference when the event is cleaned up.