PT-2024-26825
CVE-2024-35988
·
Published
2024-02-26
·
Updated
2024-11-15
Description by
CVSS 4.0
5.7
MediumMetricsAV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.37
Description
The issue is related to the definition of TASK SIZE on 64-bit NOMMU systems, where userspace memory can come from anywhere in physical RAM. If any RAM exists above 4G, the current definition of TASK SIZE is wrong, causing spurious failures in the userspace access routines.
Recommendations
Update to Linux kernel version 6.6.37 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾