Linux Kernel NULL Pointer Dereference Vulnerability in PAGEMAP_SCAN IOCTL

A NULL pointer dereference vulnerability has been identified in the Linux kernel's handling of the PAGEMAP_SCAN ioctl. This issue occurs when vec_len is set to 0, leading to a kernel panic due to a null pointer dereference. The vulnerability has been observed in Linux kernel version 6.17.0-rc6.

Impact

Exploitation of this vulnerability causes a general protection fault, leading to a kernel panic.

Reproduction

To reproduce this vulnerability, invoke the PAGEMAP_SCAN ioctl with vec_len set to 0. This can be done using a simple C program or script that makes the appropriate ioctl call. The kernel will panic, displaying an 'Oops' message indicating a general protection fault caused by a null pointer dereference.

Remediation

Users can upgrade to the latest stable version of the Linux kernel, where this vulnerability has been fixed.