CVE-2024-39371 is a medium severity vulnerability in the Linux kernel's io_uring subsystem. It involves a NULL pointer dereference triggered when a forced asynchronous request is made with an invalid file descriptor, leading to a kernel crash (Oops). The issue arises because the function io_file_can_poll() did not properly check for a non-NULL file pointer. This flaw has been fixed in current kernels by adding a safety check that prevents the NULL pointer dereference and results in a controlled error response (-EBADF).