In the Linux kernel, the following vulnerability has been resolved: ice: Fix some null pointer dereference issues in ice_ptp.c devm_kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure. https://git.kernel.org/stable/c/3027e7b15b02d2d37e3f82d6b8404f6d37e3b8cf https://git.kernel.org/stable/c/3cd9b9bee33f39f6c6d52360fe381b89a7b12695
Created kernel tracking bugs for this issue: Affects: fedora-all [bug 2266348]
This was introduced in 6.7 and fixed in 6.7.2/6.8-rc1. It never hit stable Fedora releases.
Small GFP_KERNEL allocations never fail. It is the de-facto rule of the Linux kernel known as "too small to fail". See: https://lwn.net/Articles/964793/ quote: "The kernel, for all practical purposes, already implements GFP_NOFAIL behavior for allocations of eight pages or less." And older articles about the same topic: https://lwn.net/Articles/723317/ https://lwn.net/Articles/627419/ Therefore, I don't think we should treat these missing checks as CVEs.