Linux Kernel NULL Pointer Dereference Vulnerability in Generic Hwtstamp Ioctl Lower Function

A null pointer dereference vulnerability has been identified in the Linux kernel's generic_hwtstamp_ioctl_lower() function. This issue arises when the ethtool tsconfig Netlink path is used, leading to a system crash. The vulnerability occurs because the function is called with a NULL ifr, which the function does not expect and subsequently dereferences. The vulnerability affects the Linux kernel stable tree.

Impact

Exploitation of this vulnerability leads to a system crash due to a null pointer dereference.

Reproduction

The vulnerability can be reproduced by sending an ethtool tsconfig Netlink message that triggers the generic_hwtstamp_ioctl_lower() function. This call will be made with a NULL ifr, causing the function to dereference the NULL pointer and crash the system.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.