Linux Kernel DRBD Null Pointer Dereference Vulnerability

A null pointer dereference vulnerability has been identified in the Linux kernel's DRBD (Distributed Replicated Block Device) module. This issue arises in diskless DRBD devices, where the absence of a backing device leads to a null pointer dereference. The vulnerability was introduced when a bio_set_dev call was moved to an earlier stage in the request preparation process, without proper null-checking. As a result, the DRBD device's backing block device reference could be accessed when it was not available, causing a null pointer dereference.

Impact

Exploitation of this vulnerability leads to a null pointer dereference, causing a crash or undefined behavior in the kernel.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. Instructions for upgrading the Linux kernel can be found in the official Linux kernel documentation.