PT-2024-31342 · Linux+1 · Linux Kernel+1

Jonáš Vidra + 1 · Published 2024-08-20 · Updated 2024-10-10 · CVE-2024-44976

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, specifically in the ata: pata macio component. The issue was caused by a commit that increased max segment size to 64KB, which led to a DMA table overflow when a sufficiently large request was made. This overflow triggered a BUG ON() exception, causing the system to crash. The bug was reported by Kolbjørn and Jonáš, who experienced crashes on their 32-bit PowerMacs. The vulnerability can be exploited when the request size exceeds the limit set by max sectors kb, which can be increased by some distros using udev rules.

Recommendations To fix the bug for 4KB kernels, revert to the old max segment size. For 64KB kernels, halve the sg tablesize to allow for the possibility that each sg will be split into two commands.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2025-03747

CVE-2024-44976

Affected Products

Astra Linux

Linux Kernel

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/44xxx/CVE-2024-44976.json · Exploit
• https://ubuntu.com/security/CVE-2024-44976 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2024-44976 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-03747 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2024-44976 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-44976 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-44976 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-44976 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-44976 · Security Note
• https://git.kernel.org/stable/c/709e4c8f78e156ab332297bdd87527ec3da4e2d4 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-44976 · Vendor Advisory
• https://git.kernel.org/stable/c/822c8020aebcf5804a143b891e34f29873fee5e2 · Patch
• https://twitter.com/CVEnew/status/1831426303599550507 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/linus/822c8020aebcf5804a143b891e34f29873fee5e2 · Note