In the Linux kernel, the following vulnerability has been resolved:
x86/mm: Fix pti_clone_pgtable() alignment assumption
Guenter reported dodgy crashes on an i386-nosmp build using GCC-11 that had the form of endless traps until entry stack exhaust and then #DF from the stack guard.
It turned out that pti_clone_pgtable() had alignment assumptions on the start address, notably it hard assumes start is PMD aligned. This is true on x86_64, but very much not true on i386.
These assumptions can cause the end condition to malfunction, leading to a 'short' clone. Guess what happens when the user mapping has a short copy of the entry text?
Use the correct increment form for addr to avoid alignment assumptions.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.165-110.161Upgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade bpftoolUpgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.224-212.876 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.106-116.188Upgrade kernel-headersUpgrade perf-debuginfoUpgrade perfUpgrade python3-perfUpgrade kernel | Oct 16, 2025 | Sep 4, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 6, 2024 | Sep 4, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Sep 4, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Dec 5, 2024 | Sep 4, 2024 |
| Suse | — | Upgrade dtb-amazonUpgrade dtb-marvellUpgrade kernel-azureUpgrade dtb-socionextUpgrade kernel-64kb-extraUpgrade dtb-allwinnerUpgrade dtb-alteraUpgrade dtb-exynosUpgrade kernel-rt_debugUpgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade kernel-azure-develUpgrade kernel-defaultUpgrade kernel-default-livepatchUpgrade dtb-nvidiaUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade dlm-kmp-rtUpgrade kernel-default-baseUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade dtb-lgUpgrade kernel-rt_debug-develUpgrade dtb-qcomUpgrade kernel-source-azureUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-default-develUpgrade kernel-default-vdsoUpgrade kernel-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-azure-extraUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-default-livepatch-develUpgrade dtb-appleUpgrade dtb-freescaleUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade kernel-docsUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade dlm-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-armUpgrade kernel-debug-develUpgrade dtb-amdUpgrade reiserfs-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade dtb-amlogicUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-64kbUpgrade kernel-azure-vdsoUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade dtb-hisiliconUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-debugUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade kernel-develUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-apmUpgrade reiserfs-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade dlm-kmp-azure | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-200-genericUpgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1072-awsUpgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-oem-24.04Upgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-oemUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-genericUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-azureUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-osp1Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-nvidia-6.8Upgrade linux-image-ibmUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-gkeUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-oem-24.04aUpgrade linux-image-virtualUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-azure-lts-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-intelUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1135-awsUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-ibm-classicUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-5.4.0-1139-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1140-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-bluefieldUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oracle | Nov 4, 2024 | Sep 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Sep 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub