CVE-2024-44965
MEDIUMLinux Kernel - Denial of Service via pti_clone_pgtable Alignment Issue
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix pti_clone_pgtable() alignment assumption Guenter reported dodgy crashes on an i386-nosmp build using GCC-11 that had the form of endless traps until entry stack exhaust and then #DF from the stack guard. It turned out that pti_clone_pgtable() had alignment assumptions on the start address, notably it hard assumes start is PMD aligned. This is true on x86_64, but very much not true on i386. These assumptions can cause the end condition to malfunction, leading to a 'short' clone. Guess what happens when the user mapping has a short copy of the entry text? Use the correct increment form for addr to avoid alignment assumptions.
References (10)
Core 10
Core References
Scores
CVSS v3
5.5
EPSS
0.0022
EPSS Percentile
13.1%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
Status
published
Products (27)
linux/Kernel
4.19.0 - 4.19.320linux
linux/Kernel
4.20.0 - 5.4.282linux
linux/Kernel
5.11.0 - 5.15.165linux
linux/Kernel
5.16.0 - 6.1.105linux
linux/Kernel
5.5.0 - 5.10.224linux
linux/Kernel
6.2.0 - 6.6.46linux
linux/Kernel
6.7.0 - 6.10.5linux
Linux/Linux
< 4.19
Linux/Linux
16a3fe634f6a568c6234b8747e5d50487fed3526 - 18da1b27ce16a14a9b636af9232acb4fb24f4c9e
Linux/Linux
16a3fe634f6a568c6234b8747e5d50487fed3526 - 25a727233a40a9b33370eec9f0cad67d8fd312f8
... and 17 more
Published
Sep 04, 2024
Tracked Since
Feb 18, 2026