In the Linux kernel, the following vulnerability has been resolved:
mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL
commit a421ef303008 ("mm: allow !GFP_KERNEL allocations for kvmalloc") includes support for __GFP_NOFAIL, but it presents a conflict with commit dd544141b9eb ("vmalloc: back off when the current task is OOM-killed"). A possible scenario is as follows:
process-a __vmalloc_node_range(GFP_KERNEL | __GFP_NOFAIL) __vmalloc_area_node() vm_area_alloc_pages() --> oom-killer send SIGKILL to process-a if (fatal_signal_pending(current)) break; --> return NULL;
To fix this, do not check fatal_signal_pending() in vm_area_alloc_pages() if __GFP_NOFAIL set.
This issue occurred during OPLUS KASAN TEST. Below is part of the log -> oom-killer sends signal to process [65731.222840] [ T1308] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/apps/uid_10198,task=gs.intelligence,pid=32454,uid=10198
[65731.259685] [T32454] Call trace: [65731.259698] [T32454] dump_backtrace+0xf4/0x118 [65731.259734] [T32454] show_stack+0x18/0x24 [65731.259756] [T32454] dump_stack_lvl+0x60/0x7c [65731.259781] [T32454] dump_stack+0x18/0x38 [65731.259800] [T32454] mrdump_common_die+0x250/0x39c [mrdump] [65731.259936] [T32454] ipanic_die+0x20/0x34 [mrdump] [65731.260019] [T32454] atomic_notifier_call_chain+0xb4/0xfc [65731.260047] [T32454] notify_die+0x114/0x198 [65731.260073] [T32454] die+0xf4/0x5b4 [65731.260098] [T32454] die_kernel_fault+0x80/0x98 [65731.260124] [T32454] __do_kernel_fault+0x160/0x2a8 [65731.260146] [T32454] do_bad_area+0x68/0x148 [65731.260174] [T32454] do_mem_abort+0x151c/0x1b34 [65731.260204] [T32454] el1_abort+0x3c/0x5c [65731.260227] [T32454] el1h_64_sync_handler+0x54/0x90 [65731.260248] [T32454] el1h_64_sync+0x68/0x6c
[65731.260269] [T32454] z_erofs_decompress_queue+0x7f0/0x2258 --> be->decompressed_pages = kvcalloc(be->nr_pages, sizeof(struct page *), GFP_KERNEL | __GFP_NOFAIL); kernel panic by NULL pointer dereference. erofs assume kvmalloc with __GFP_NOFAIL never return NULL. [65731.260293] [T32454] z_erofs_runqueue+0xf30/0x104c [65731.260314] [T32454] z_erofs_readahead+0x4f0/0x968 [65731.260339] [T32454] read_pages+0x170/0xadc [65731.260364] [T32454] page_cache_ra_unbounded+0x874/0xf30 [65731.260388] [T32454] page_cache_ra_order+0x24c/0x714 [65731.260411] [T32454] filemap_fault+0xbf0/0x1a74 [65731.260437] [T32454] __do_fault+0xd0/0x33c [65731.260462] [T32454] handle_mm_fault+0xf74/0x3fe0 [65731.260486] [T32454] do_mem_abort+0x54c/0x1b34 [65731.260509] [T32454] el0_da+0x44/0x94 [65731.260531] [T32454] el0t_64_sync_handler+0x98/0xb4 [65731.260553] [T32454] el0t_64_sync+0x198/0x19c
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.96-102.177Upgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-devel | Jun 11, 2025 | Jul 5, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 18, 2024 | Jul 5, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | Jul 5, 2024 |
| Suse | — | Upgrade kernel-default-livepatchUpgrade dlm-kmp-rtUpgrade dtb-caviumUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-rt-extraUpgrade gfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade dtb-nvidiaUpgrade kernel-azure-develUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade dtb-sprdUpgrade kernel-source-vanillaUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kernel-rt_debug-develUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-source-rtUpgrade dtb-marvellUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade dtb-broadcomUpgrade kernel-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmallUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade dtb-amlogicUpgrade kernel-syms-rtUpgrade dtb-exynosUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debugUpgrade kernel-sourceUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade kernel-symsUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade dtb-lgUpgrade ocfs2-kmp-azureUpgrade dtb-xilinxUpgrade reiserfs-kmp-defaultUpgrade dtb-amazonUpgrade dtb-mediatekUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-devel-rtUpgrade dtb-freescaleUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade kernel-64kb-optionalUpgrade dtb-allwinnerUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-extraUpgrade gfs2-kmp-rtUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade kernel-64kb-develUpgrade dtb-armUpgrade dtb-amdUpgrade kernel-obs-qaUpgrade ocfs2-kmp-default | Aug 8, 2024 | Jul 5, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-44-genericUpgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1014-azureUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-awsUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64k | Sep 12, 2024 | Jul 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub