In the Linux kernel, the following vulnerability has been resolved:
mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL
commit a421ef303008 ("mm: allow !GFP_KERNEL allocations for kvmalloc") includes support for __GFP_NOFAIL, but it presents a conflict with commit dd544141b9eb ("vmalloc: back off when the current task is OOM-killed"). A possible scenario is as follows:
process-a __vmalloc_node_range(GFP_KERNEL | __GFP_NOFAIL) __vmalloc_area_node() vm_area_alloc_pages() --> oom-killer send SIGKILL to process-a if (fatal_signal_pending(current)) break; --> return NULL;
To fix this, do not check fatal_signal_pending() in vm_area_alloc_pages() if __GFP_NOFAIL set.
This issue occurred during OPLUS KASAN TEST. Below is part of the log -> oom-killer sends signal to process [65731.222840] [ T1308] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/apps/uid_10198,task=gs.intelligence,pid=32454,uid=10198
[65731.259685] [T32454] Call trace: [65731.259698] [T32454] dump_backtrace+0xf4/0x118 [65731.259734] [T32454] show_stack+0x18/0x24 [65731.259756] [T32454] dump_stack_lvl+0x60/0x7c [65731.259781] [T32454] dump_stack+0x18/0x38 [65731.259800] [T32454] mrdump_common_die+0x250/0x39c [mrdump] [65731.259936] [T32454] ipanic_die+0x20/0x34 [mrdump] [65731.260019] [T32454] atomic_notifier_call_chain+0xb4/0xfc [65731.260047] [T32454] notify_die+0x114/0x198 [65731.260073] [T32454] die+0xf4/0x5b4 [65731.260098] [T32454] die_kernel_fault+0x80/0x98 [65731.260124] [T32454] __do_kernel_fault+0x160/0x2a8 [65731.260146] [T32454] do_bad_area+0x68/0x148 [65731.260174] [T32454] do_mem_abort+0x151c/0x1b34 [65731.260204] [T32454] el1_abort+0x3c/0x5c [65731.260227] [T32454] el1h_64_sync_handler+0x54/0x90 [65731.260248] [T32454] el1h_64_sync+0x68/0x6c
[65731.260269] [T32454] z_erofs_decompress_queue+0x7f0/0x2258 --> be->decompressed_pages = kvcalloc(be->nr_pages, sizeof(struct page *), GFP_KERNEL | __GFP_NOFAIL); kernel panic by NULL pointer dereference. erofs assume kvmalloc with __GFP_NOFAIL never return NULL. [65731.260293] [T32454] z_erofs_runqueue+0xf30/0x104c [65731.260314] [T32454] z_erofs_readahead+0x4f0/0x968 [65731.260339] [T32454] read_pages+0x170/0xadc [65731.260364] [T32454] page_cache_ra_unbounded+0x874/0xf30 [65731.260388] [T32454] page_cache_ra_order+0x24c/0x714 [65731.260411] [T32454] filemap_fault+0xbf0/0x1a74 [65731.260437] [T32454] __do_fault+0xd0/0x33c [65731.260462] [T32454] handle_mm_fault+0xf74/0x3fe0 [65731.260486] [T32454] do_mem_abort+0x54c/0x1b34 [65731.260509] [T32454] el0_da+0x44/0x94 [65731.260531] [T32454] el0t_64_sync_handler+0x98/0xb4 [65731.260553] [T32454] el0t_64_sync+0x198/0x19c
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade bpftoolUpgrade kernelUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-livepatch-6.1.96-102.177Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-devel | Jun 11, 2025 | Jul 5, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 18, 2024 | Jul 5, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | Jul 5, 2024 |
| Suse | — | Upgrade kernel-debug-develUpgrade dtb-armUpgrade dtb-lgUpgrade kernel-obs-qaUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-64kb-livepatch-develUpgrade dtb-apmUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-64kb-develUpgrade dlm-kmp-64kbUpgrade kernel-rt-develUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade dtb-renesasUpgrade kernel-64kb-optionalUpgrade kernel-devel-rtUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade dtb-amazonUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade reiserfs-kmp-rtUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-default-optionalUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-appleUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-develUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-64kbUpgrade kernel-source-azureUpgrade dtb-mediatekUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-azureUpgrade dtb-marvellUpgrade kernel-docs-htmlUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade dtb-nvidiaUpgrade gfs2-kmp-defaultUpgrade kernel-macrosUpgrade kernel-azure-vdsoUpgrade kernel-syms-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-defaultUpgrade dtb-alteraUpgrade kernel-rtUpgrade reiserfs-kmp-azureUpgrade dtb-broadcomUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade dtb-caviumUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-develUpgrade dtb-sprdUpgrade kernel-kvmsmallUpgrade dtb-qcomUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade kernel-debug-vdsoUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-vdso | Aug 8, 2024 | Jul 5, 2024 |
| Ubuntu | — | Upgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-ibmUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-22.04 | Sep 12, 2024 | Jul 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub