Linux · Linux Kernel · CVE-2024-39470
**Name of the Vulnerable Software and Affected Versions**
Linux kernel (affected versions not specified)
**Description**
The issue is related to a possible null pointer dereference in the `eventfs find events()` function. This can occur when the `update events attr` function is called, which performs operations on the members of the `ei` struct when `ei` is NULL. The problem arises when `ei->is freed` is set, and the function returns NULL directly. This could potentially lead to a denial of service.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.