PT-2024-31332
CVE-2024-44965
·
تاريخ النشر
2024-08-01
·
تاريخ التحديث
2026-07-28
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.50
Description
The issue is related to the
pti clone pgtable() function, which had alignment assumptions on the start address, notably assuming it is PMD aligned. This assumption is true on x86 64 but not on i386, leading to a malfunction in the end condition and resulting in a 'short' clone. The problem occurs when the user mapping has a short copy of the entry text. To resolve this, the correct increment form for addr should be used to avoid alignment assumptions.Recommendations
Update to Linux kernel version 6.6.50 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
pti clone pgtable() function until a patch is available.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾