Azure Linux 3.0 Security Update: kernel (CVE-2024-39474)

"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-39474 advisory. - In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix vmalloc which may retur...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-39474)

"The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-39474 advisory. - In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix vmalloc which may retur...

CVE-2024-39474

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix vmalloc which may return null if called with GFPNOFAIL commit a421ef303008 "mm: allow !GFPKERNEL allocations for kvmalloc" includes support for GFPNOFAIL, but it presents a conflict with commit dd544141b9eb...

CVE-2024-39474

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix vmalloc which may return null if called with GFPNOFAIL commit a421ef303008 "mm: allow !GFPKERNEL allocations for kvmalloc" includes support for GFPNOFAIL, but it presents a conflict with commit dd544141b9eb...

CVE-2024-39474

CVE-2024-39474 involves a Linux kernel vmalloc regression where __GFP_NOFAIL allocations may return NULL, due to a race with OOM-killer flow and GFP_KERNEL handling. The fix updates vm_area_alloc_pages() to not check fatal_signal_pending() when __GFP_NOFAIL is set, preventing a NULL vmalloc() ret...