PT-2025-2923 · Linux+2 · Linux Kernel+2

Kefeng Wang · Published 2024-12-18 · Updated 2025-04-01 · CVE-2024-52319

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue arises from the Linux kernel's handling of huge page sizes, where the hugetlb no page() function calls folio zero user() with a fault address that may not be aligned with the huge page size. This can lead to folio zero user() calling clear gigantic page() with an unaligned address, which requires an address aligned with the huge page size. As a result, this can cause memory corruption or information leaks. The function clear gigantic page() has been updated to use a more obvious naming convention, 'addr hint' instead of 'addr', to reflect its purpose.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

CWE-130

Related Identifiers

BDU:2026-03867

CVE-2024-52319

USN-7379-1

USN-7379-2

USN-7380-1

USN-7381-1

USN-7382-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 340

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/52xxx/CVE-2024-52319.json · Exploit
• https://ubuntu.com/security/CVE-2024-56639 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56593 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56602 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56594 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56659 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-36476 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56580 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56588 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57791 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57799 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-52319 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56622 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56667 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57895 · Vendor Advisory