Memory Allocation Issue in Linux Kernel's 9p USB Gadget Driver

CVE-2024-56730

Summary

A vulnerability exists in the Linux kernel's 9p USB gadget driver, which arises from improper handling of memory allocation failures. Specifically, the kzalloc() function, intended for memory allocation, did not appropriately manage NULL return values during memory exhaustion events. This oversight could lead to unintended consequences such as system instability or application errors, as processes relying on successful memory allocation may proceed without the necessary resources. The issue has been addressed by implementing proper checks for NULL returns to enhance memory management safety.

References