Linux Kernel UDP-Lite Null Pointer Dereference Vulnerability

A null pointer dereference vulnerability has been identified in the UDP-Lite implementation of the Linux kernel. This issue arises in the 'udplite' and 'udplitev6' socket initialization functions, where the error handling for socket initialization failures was not properly managed. As a result, a null pointer dereference occurs when the UDP-Lite socket's production queue is accessed, leading to a potential crash or undefined behavior.

Impact

Exploitation of this vulnerability causes a null pointer dereference, which can lead to a crash or undefined behavior of the kernel.

Reproduction

The vulnerability can be reproduced by initializing a UDP-Lite socket after a failed socket initialization, which can occur in certain conditions. This can be simulated using a tool like Syzkaller, which is mentioned in the context as having reported the issue.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.