Vigil@nce - Linux kernel: NULL pointer dereference via nfs_v4_2_minor_ops
January 2016 by Vigil@nce
This bulletin was written by Vigil@nce : http://vigilance.fr/offer
SYNTHESIS OF THE VULNERABILITY
An attacker can force a NULL pointer to be dereferenced in
nfs_v4_2_minor_ops of the Linux kernel, in order to trigger a
denial of service.
Impacted products: Linux.
Severity: 1/4.
Creation date: 05/01/2016.
DESCRIPTION OF THE VULNERABILITY
The Linux kernel implements a NFS client.
However, the mig_recovery_ops field of the nfs_v4_2_minor_ops
structure is not initialized. During a Recovery operation, a NULL
pointer is thus dereferenced.
An attacker can therefore force a NULL pointer to be dereferenced
in nfs_v4_2_minor_ops of the Linux kernel, in order to trigger a
denial of service.
ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN
http://vigilance.fr/vulnerability/Linux-kernel-NULL-pointer-dereference-via-nfs-v4-2-minor-ops-18641