Linux Kernel NULL Pointer Dereference Vulnerability in MIPS KVM VZ Extension

A NULL pointer dereference vulnerability has been identified in the Linux kernel's handling of KVM guests with MIPS VZ extensions. This issue arises after the removal of KVM_TE support, leading to a crash when a KVM guest is created. The vulnerability is present in the stable Linux kernel versions 6.4.0-rc3 and earlier.

Impact

Exploitation of this vulnerability causes a kernel panic due to an unhandled NULL pointer dereference, which can lead to a denial of service by crashing the system.

Reproduction

To reproduce this vulnerability, load a KVM guest with MIPS VZ extensions on a system running an affected version of the Linux kernel. The guest creation process will trigger a NULL pointer dereference, causing a kernel panic.

Remediation

Users can upgrade to a patched version of the Linux kernel that addresses this vulnerability. The official Linux kernel repositories include the necessary updates.