Lucene search

K
nvd416baaa9-dc9f-4396-8d5f-8c081fb06d67NVD:CVE-2024-38543
HistoryJun 19, 2024 - 2:15 p.m.

CVE-2024-38543

2024-06-1914:15:14
416baaa9-dc9f-4396-8d5f-8c081fb06d67
web.nvd.nist.gov
linux
kernel
vulnerability
allocation
lib
test_hmm
kcalloc
dmirror_device_evict_chunk
null pointer dereference
__gfp_nofail flag
kvcalloc
memory allocation

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved:

lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure

The kcalloc() in dmirror_device_evict_chunk() will return null if the
physical memory has run out. As a result, if src_pfns or dst_pfns is
dereferenced, the null pointer dereference bug will happen.

Moreover, the device is going away. If the kcalloc() fails, the pages
mapping a chunk could not be evicted. So add a __GFP_NOFAIL flag in
kcalloc().

Finally, as there is no need to have physically contiguous memory, Switch
kcalloc() to kvcalloc() in order to avoid failing allocations.

0.0004 Low

EPSS

Percentile

15.7%

Related for NVD:CVE-2024-38543