Linux Kernel usbnet NULL Pointer Dereference Vulnerability

A race condition vulnerability has been identified in the Linux kernel's usbnet component, leading to a NULL pointer dereference and kernel panic. This issue arises because the usb_submit_urb function does not validate whether usbnet is in the process of shutting down, creating a scenario where a URB request can succeed while the associated SKB data fails to be queued. When the system attempts to process the SKB data, it encounters a NULL pointer, causing a kernel panic.

Impact

Exploitation of this vulnerability leads to a NULL pointer dereference, causing a kernel panic and disrupting system operations.