PT-2024-1952 · Linux · Linux Kernel

Jmill · Published 2024-01-25 · Updated 2025-01-16 · CVE-2024-26621

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the mm: huge memory function in the Linux kernel, which causes problems due to the constrained virtual address space on 32-bit systems. It has been reported that forcing huge page alignment on 32-bit systems does not make sense. The vulnerability is related to errors in memory allocation and can potentially lead to a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-789

CWE-119

Related Identifiers

BDU:2024-01751

CVE-2024-26621

DSA-5658-1

Affected Products

Linux Kernel

References · 74

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26621.json · Exploit
• http://openwall.com/lists/oss-security/2024/07/12/3 · Patch
• http://openwall.com/lists/oss-security/2024/07/13/2 · Patch
• https://git.kernel.org/stable/c/87632bc9ecff5ded93433bc0fca428019bdd1cfe · Patch
• http://openwall.com/lists/oss-security/2024/07/09/1 · Patch
• http://openwall.com/lists/oss-security/2024/07/29/2 · Patch
• https://osv.dev/vulnerability/DSA-5658-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2024-26621 · Vendor Advisory
• http://openwall.com/lists/oss-security/2024/07/11/5 · Patch
• https://git.kernel.org/stable/c/7432376c913381c5f24d373a87ff629bbde94b47 · Patch
• https://zolutal.github.io/aslrnt · Patch
• http://openwall.com/lists/oss-security/2024/07/10/8 · Patch
• http://openwall.com/lists/oss-security/2024/07/11/4 · Patch
• http://openwall.com/lists/oss-security/2024/07/08/3 · Patch
• https://git.kernel.org/stable/c/4ef9ad19e17676b9ef071309bc62020e2373705d · Patch