Linux Kernel Privileged Command NULL Pointer Dereference Vulnerability

A vulnerability in the Linux kernel's handling of privileged command operations can lead to a NULL pointer dereference. This issue arises in the privcmd_ioctl_dm_op() function, where unlock_pages() may be called with NULL pages, causing a NULL dereference. Additionally, the lock_pages() function does not fully verify the success of pin_user_pages_fast(), potentially leading to incomplete locking of pages in memory. Such discrepancies could cause intermittent failures when the associated memory is accessed in user mode. The vulnerability affects several versions of the Linux kernel.

Impact

Exploitation of this vulnerability can lead to a NULL pointer dereference, causing a crash or undefined behavior in the kernel.