Threats tagged 'ghsa-h9fh-4377-wfq4'

CVE-2024-39474 is a vulnerability in the Linux kernel's vmalloc function where it may return NULL despite being called with the __GFP_NOFAIL flag, which is expected to never fail. This occurs due to a conflict between two kernel commits related to memory allocation and out-of-memory (OOM) handling. The issue can lead to kernel panic caused by NULL pointer dereference when the kernel assumes allocations with __GFP_NOFAIL never fail.