A NULL pointer dereference vulnerability in the Linux kernel af_iucv module could allow an unauthenticated attacker to cause a denial of service through a system crash.

The vulnerability exists within the afiucv_hs_callback_syn function, which fails to correctly validate the child socket pointer before calling iucv_sock_kill. An unauthenticated attacker can exploit this by triggering a condition that results in a failed socket allocation, leading the kernel to dereference a NULL pointer.

Successful exploitation of this flaw results in a kernel panic, effectively causing a denial of service for the affected system. Given the CVSS score of 7.5, this high-severity vulnerability poses a significant risk to system availability, particularly for critical infrastructure or server environments where uptime is essential.

Immediate Action: Administrators should update their Linux kernel to the versions specified in the OSV fixed packages (5.10.265, 5.15.216, 6.1.183, 6.6.148, or later) as soon as possible.

Proactive Monitoring: Review system logs for kernel panics or unexpected reboots, and monitor network traffic for anomalous sequences targeting the IUCV protocol.

Compensating Controls: While no specific WAF rule can prevent this internal kernel flaw, ensuring that the system is behind a robust perimeter firewall can limit exposure to untrusted network traffic that might trigger the vulnerable callback.

Public Exploit Available: No (unknown).

The severity of this vulnerability, combined with its potential to cause immediate system instability, necessitates prompt action. Organizations should prioritize patching their kernel environments according to their established vulnerability management lifecycle to mitigate the risk of denial-of-service attacks.