CVE-2024-39474

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the vmalloc function in the Linux kernel, which may return null when called with GFP NOFAIL. This can cause a kernel panic due to a null pointer dereference. The problem occurs when the oom-killer sends a signal to a process, and the vm area alloc pages function returns null. To fix this, the fatal signal pending check should be removed from vm area alloc pages when GFP NOFAIL is set. The issue was discovered during the OPLUS KASAN TEST.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.