PT-2024-31332 · Linux+7 · Linux Kernel+7
Guenter Roeck
·
Published
2024-08-01
·
Updated
2025-09-29
·
CVE-2024-44965
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.50
Description
The issue is related to the
pti clone pgtable() function, which had alignment assumptions on the start address, notably assuming it is PMD aligned. This assumption is true on x86 64 but not on i386, leading to a malfunction in the end condition and resulting in a 'short' clone. The problem occurs when the user mapping has a short copy of the entry text. To resolve this, the correct increment form for addr should be used to avoid alignment assumptions.Recommendations
Update to Linux kernel version 6.6.50 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
pti clone pgtable() function until a patch is available.Exploit
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu