PT-2024-29722 · Linux+4 · Linux Kernel+4

Published 2024-03-18 · Updated 2025-10-03 · CVE-2024-42066

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a potential integer overflow in page size calculation in the drm/xe module of the Linux kernel. This is resolved by explicitly casting tbo->page alignment to u64 before bit-shifting to prevent overflow when assigning to min page size.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Overflow

Buffer Overflow

Weakness Enumeration

CWE-190

CWE-120

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

ALT-PU-2024-10855

ALT-PU-2025-12647

AZL-47125

AZL-47210

BDU:2025-03002

CVE-2024-42066

USN-7089-1

USN-7089-2

USN-7089-3

USN-7089-4

USN-7089-5

USN-7089-6

USN-7089-7

USN-7090-1

USN-7095-1

USN-7156-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Ubuntu

References · 648

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/42xxx/CVE-2024-42066.json · Exploit
• https://ubuntu.com/security/CVE-2024-41079 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-47125 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46753 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42295 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46795 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42127 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-45026 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46815 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46825 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-43895 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42238 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42278 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46868 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-43884 · Vendor Advisory