Threats tagged 'ghsa-4p87-j93j-28j5'

CVE-2025-38050 is a medium severity vulnerability in the Linux kernel's hugetlb subsystem that causes a kernel NULL pointer dereference and crash when replacing free hugetlb folios. The issue arises from a race condition between two kernel functions accessing hugetlb folios without proper locking, leading to a NULL pointer access. The flaw has been fixed by adding appropriate locking to prevent the NULL pointer dereference.