In the Linux kernel, the following vulnerability has been resolved:
mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL
commit a421ef303008 ("mm: allow !GFP_KERNEL allocations for kvmalloc") includes support for __GFP_NOFAIL, but it presents a conflict with commit dd544141b9eb ("vmalloc: back off when the current task is OOM-killed"). A possible scenario is as follows:
process-a __vmalloc_node_range(GFP_KERNEL | __GFP_NOFAIL) __vmalloc_area_node() vm_area_alloc_pages() --> oom-killer send SIGKILL to process-a if (fatal_signal_pending(current)) break; --> return NULL;
To fix this, do not check fatal_signal_pending() in vm_area_alloc_pages() if __GFP_NOFAIL set.
This issue occurred during OPLUS KASAN TEST. Below is part of the log -> oom-killer sends signal to process [65731.222840] [ T1308] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/apps/uid_10198,task=gs.intelligence,pid=32454,uid=10198
[65731.259685] [T32454] Call trace: [65731.259698] [T32454] dump_backtrace+0xf4/0x118 [65731.259734] [T32454] show_stack+0x18/0x24 [65731.259756] [T32454] dump_stack_lvl+0x60/0x7c [65731.259781] [T32454] dump_stack+0x18/0x38 [65731.259800] [T32454] mrdump_common_die+0x250/0x39c [mrdump] [65731.259936] [T32454] ipanic_die+0x20/0x34 [mrdump] [65731.260019] [T32454] atomic_notifier_call_chain+0xb4/0xfc [65731.260047] [T32454] notify_die+0x114/0x198 [65731.260073] [T32454] die+0xf4/0x5b4 [65731.260098] [T32454] die_kernel_fault+0x80/0x98 [65731.260124] [T32454] __do_kernel_fault+0x160/0x2a8 [65731.260146] [T32454] do_bad_area+0x68/0x148 [65731.260174] [T32454] do_mem_abort+0x151c/0x1b34 [65731.260204] [T32454] el1_abort+0x3c/0x5c [65731.260227] [T32454] el1h_64_sync_handler+0x54/0x90 [65731.260248] [T32454] el1h_64_sync+0x68/0x6c
[65731.260269] [T32454] z_erofs_decompress_queue+0x7f0/0x2258 --> be->decompressed_pages = kvcalloc(be->nr_pages, sizeof(struct page *), GFP_KERNEL | __GFP_NOFAIL); kernel panic by NULL pointer dereference. erofs assume kvmalloc with __GFP_NOFAIL never return NULL. [65731.260293] [T32454] z_erofs_runqueue+0xf30/0x104c [65731.260314] [T32454] z_erofs_readahead+0x4f0/0x968 [65731.260339] [T32454] read_pages+0x170/0xadc [65731.260364] [T32454] page_cache_ra_unbounded+0x874/0xf30 [65731.260388] [T32454] page_cache_ra_order+0x24c/0x714 [65731.260411] [T32454] filemap_fault+0xbf0/0x1a74 [65731.260437] [T32454] __do_fault+0xd0/0x33c [65731.260462] [T32454] handle_mm_fault+0xf74/0x3fe0 [65731.260486] [T32454] do_mem_abort+0x54c/0x1b34 [65731.260509] [T32454] el0_da+0x44/0x94 [65731.260531] [T32454] el0t_64_sync_handler+0x98/0xb4 [65731.260553] [T32454] el0t_64_sync+0x198/0x19c
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.96-102.177Upgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo | Jun 11, 2025 | Jul 5, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 18, 2024 | Jul 5, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | Jul 5, 2024 |
| Suse | — | Upgrade kernel-default-optionalUpgrade kernel-symsUpgrade ocfs2-kmp-azureUpgrade dtb-apmUpgrade kernel-rt-develUpgrade dtb-allwinnerUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-rtUpgrade kernel-source-azureUpgrade reiserfs-kmp-rtUpgrade kernel-default-baseUpgrade kernel-64kb-optionalUpgrade dlm-kmp-defaultUpgrade kernel-64kbUpgrade kernel-devel-rtUpgrade dlm-kmp-azureUpgrade dtb-socionextUpgrade gfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-lgUpgrade kernel-default-extraUpgrade kernel-develUpgrade dlm-kmp-64kbUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-debug-develUpgrade kernel-obs-qaUpgrade dtb-armUpgrade dtb-amdUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade dtb-xilinxUpgrade kernel-debugUpgrade dtb-renesasUpgrade dtb-appleUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-default-develUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-broadcomUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade kernel-azure-develUpgrade kernel-azureUpgrade kernel-defaultUpgrade dtb-alteraUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade dtb-marvellUpgrade kernel-rt-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-develUpgrade dtb-qcomUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade kernel-azure-livepatch-develUpgrade kernel-sourceUpgrade dtb-exynosUpgrade kernel-rt_debugUpgrade kernel-debug-vdsoUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade dtb-amlogicUpgrade kernel-64kb-extraUpgrade kernel-azure-optionalUpgrade kernel-default-livepatchUpgrade dtb-caviumUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-64kbUpgrade kernel-rtUpgrade dtb-rockchipUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade gfs2-kmp-defaultUpgrade kernel-macrosUpgrade kernel-azure-vdsoUpgrade kernel-syms-azure | Aug 8, 2024 | Jul 5, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-gkeUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-gcpUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-44-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1015-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1012-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-ibm-classic | Sep 12, 2024 | Jul 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub