Linux Kernel Null Pointer Dereference Vulnerability in SYSV File System

A null pointer dereference vulnerability has been identified in the Linux kernel's SYSV file system. This issue arises because the function 'sb_getblk' can return a null pointer, which, when followed by taking a lock, leads to a dereference of a null pointer, causing a crash. The vulnerability has been addressed by adding a null check before the lock is applied.

Impact

Exploitation of this vulnerability leads to a null pointer dereference, causing a kernel crash.

Reproduction

The vulnerability can be reproduced by triggering the 'alloc_branch' function in the SYSV file system. When 'sb_getblk' is called with a parent block that does not exist, it returns a null pointer. If the code then attempts to lock this null pointer, it causes a null pointer dereference, crashing the kernel.

Remediation

Users can upgrade to the latest stable version of the Linux kernel to address this vulnerability.