ThreatCluster

Microsoft Addresses Two Vulnerabilities in Memory Management

First seen 21 Feb 2026, 03:20 UTC Api.Msrc.Microsoft 41

Article Content

Browse articles
ThreatCluster

Microsoft has published information regarding two CVEs affecting memory management in the Linux kernel. CVE-2024-45022, published on September 11, 2024, addresses issues with page mapping in vm_area_alloc_pages(). CVE-2024-39474, published on July 5, 2024, fixes a potential null return in vmalloc when called with __GFP_NOFAIL.

Timeline

2024-07-05
CVE-2024-39474 published
2024-09-11
CVE-2024-45022 published
2026-02-18
Article published on CVE-2024-39474
2026-02-21
Article published on CVE-2024-45022