Linux Kernel NULL Pointer Dereference Vulnerability in iSCSI Target Module

A vulnerability in the Linux kernel's SCSI target iSCSI module can lead to a NULL pointer dereference, causing a kernel crash. This issue arises when the NOPIN response timer expires on a deleted connection, leading to a failure in the connection handling. The problem occurs because the NOPIN response timer may be restarted after it has expired, without properly stopping the timer first, which can create a race condition.

Impact

Exploitation of this vulnerability causes a kernel crash due to a NULL pointer dereference, disrupting system operations and potentially leading to a denial of service.