Linux Kernel NULL Pointer Dereference Vulnerability in TLS Processing

A vulnerability in the Linux kernel's TLS handling can lead to a kernel panic due to a NULL pointer dereference. This issue arises when the allocation of a page fails, causing the frag_list to be improperly set. The vulnerability is present in the net/tls component of the Linux kernel. When the next tls_strp_read_sock function is called, it attempts to process a partial record without the necessary data, leading to a crash. The issue has been resolved by ensuring that the frag_list is not set to a NULL pointer when page allocation fails.

Impact

Exploitation of this vulnerability causes a kernel panic, disrupting system operations by leading to a crash.