Threats tagged 'ghsa-864c-jv4g-gp7q'

CVE-2025-38517 is a vulnerability in the Linux kernel's alloc_tag subsystem where the function alloc_tag_top_users() attempts to acquire a semaphore lock on a non-existent alloc_tag_cttype object. This occurs when alloc_tag_cttype is not allocated due to memory profiling being disabled, uninitialized, or failed initialization. Attempting to acquire this non-existent lock leads to a kernel crash (general protection fault) during memory allocation failure scenarios.