However, this signal handler calls various functions that are not async-signal-safe, for example, syslog().
Although the immediate impact is lower, the exploitability and implications of CVE-2024-6409 still pose a significant risk.
source: www.techworm.net