Linux Kernel NULL Pointer Dereference Vulnerability in af_unix Socket Handling

A vulnerability in the Linux kernel's handling of af_unix sockets can lead to a NULL pointer dereference. This issue arises because the 'msg_get_inq' field, which is intended to be an input from the caller, is incorrectly set in the callee. If the caller does not clear this field before reusing the structure, it can result in a NULL pointer dereference. This vulnerability is present in the stable branch of the Linux kernel.

Impact

Exploitation of this vulnerability can cause a NULL pointer dereference, leading to a crash of the affected process or service.

Reproduction

The vulnerability can be reproduced by splicing data into a stream socket using the af_unix protocol, which can trigger the NULL pointer dereference when the 'msg_get_inq' field is not properly managed.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed.