CVE-2024-39477

A flaw was found in the Linux kernel's HugeTLB (Huge Translation Lookaside Buffer) memory management subsystem. When the system encounters an out-of-memory condition while tracking memory reservations, the kernel fails to handle the allocation failure properly. A local user could exploit this flaw to induce an inconsistent memory state, leading to a system crash and Denial of Service (DoS).

This vulnerability is rated as having a Low impact for Red Hat Enterprise Linux because exploitation requires local system access and relies on triggering an out-of-memory error during huge page reservation handling. In typical enterprise production environments, an unprivileged user cannot easily force kernel allocation failures without existing host-wide memory starvation. Furthermore, the flaw was introduced in an upstream kernel release that is not present in supported Red Hat Enterprise Linux kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.