Linux Kernel Ethtool General Netlink Message Handling Vulnerability

A vulnerability in the Linux kernel's handling of General Netlink messages in the Ethtool component can lead to a crash. This issue arises when the 'ethnl_tsinfo_prepare_dump' function fails to prepare a message for dumping timestamp information. The failure is not properly handled, allowing an error pointer to be passed to 'genlmsg_cancel', which is intended to cancel a message that has been started. Since the message preparation did not complete successfully, there is nothing to cancel, and this mismanagement can cause a crash.

Impact

Improper error handling in the Ethtool General Netlink message processing can lead to a kernel crash, causing a denial of service.

Reproduction

The vulnerability can be reproduced by triggering a failure in the 'ethnl_tsinfo_prepare_dump' function while dumping timestamp information for a network device. This can be done by manipulating the conditions under which the function operates, such as by using a network device that does not support the required timestamp features or by introducing an error in the message preparation process.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. The specific commit that resolves this issue is 'c3fc9976f686f9a95baf87db9d387f218fd65394', which is available in the Linux kernel stable tree.