The Linux kernel contained a flaw in the module decompression code where the function module_extend_max_pages() calls kvrealloc() to allocate memory but does not check for allocation failure. If kvrealloc() returns -ENOMEM, the code proceeds as if allocation succeeded, resulting in info->pages being NULL and info->max_pages being 0. Subsequent calls attempt to grow the array with a zero size, causing kvrealloc(NULL, 0) to return ZERO_SIZE_PTR, which is incorrectly treated as success. This leads to dereferencing ZERO_SIZE_PTR and triggers a kernel oops (crash). The fix involves adding the missing error check after module_extend_max_pages() and returning immediately on failure, aligning with other callers in the module loading path.

The vulnerability can cause a kernel oops (crash) due to dereferencing an invalid pointer when memory allocation fails during module decompression. This results in denial of service by crashing the kernel. There is no indication of code execution or privilege escalation from the provided data.

A fix has been implemented that adds the missing error check after module_extend_max_pages() and returns immediately on failure. Users should apply the official Linux kernel updates that include this fix. Patch status is not yet confirmed in the provided data; check the vendor advisory for current remediation guidance.