Lucene search

K
osvGoogleOSV:CVE-2024-38543
HistoryJun 19, 2024 - 2:15 p.m.

CVE-2024-38543

2024-06-1914:15:00
Google
osv.dev
4
linux
kernel
vulnerability
fix
null pointer
dereference
allocation
memory

AI Score

6.3

Confidence

Low

EPSS

0

Percentile

5.1%

In the Linux kernel, the following vulnerability has been resolved: lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure The kcalloc() in dmirror_device_evict_chunk() will return null if the physical memory has run out. As a result, if src_pfns or dst_pfns is dereferenced, the null pointer dereference bug will happen. Moreover, the device is going away. If the kcalloc() fails, the pages mapping a chunk could not be evicted. So add a __GFP_NOFAIL flag in kcalloc(). Finally, as there is no need to have physically contiguous memory, Switch kcalloc() to kvcalloc() in order to avoid failing allocations.