Linux Kernel GSO Packet Handling Vulnerability in Net Scheduling

A vulnerability in the Linux kernel's network scheduling component could lead to a NULL pointer dereference. This issue arises when a queueing discipline's (qdisc) limit is reduced, as only the main socket buffer (skb) queue is adjusted. Packets may remain in the Generic Segmentation Offload (GSO) skb list, creating a potential for a NULL pointer dereference when the scheduler's limit is compared to the queue length. The vulnerability affects several qdiscs, including codel, fq, fq_codel, fq_pie, hhf, and pie.

Impact

Exploitation of this vulnerability could lead to a NULL pointer dereference, causing a kernel crash.