In the Linux kernel, the following vulnerability has been resolved:
x86/mm: Fix pti_clone_pgtable() alignment assumption
Guenter reported dodgy crashes on an i386-nosmp build using GCC-11 that had the form of endless traps until entry stack exhaust and then #DF from the stack guard.
It turned out that pti_clone_pgtable() had alignment assumptions on the start address, notably it hard assumes start is PMD aligned. This is true on x86_64, but very much not true on i386.
These assumptions can cause the end condition to malfunction, leading to a 'short' clone. Guess what happens when the user mapping has a short copy of the entry text?
Use the correct increment form for addr to avoid alignment assumptions.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-livepatch-5.15.165-110.161Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.224-212.876Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-6.1.106-116.188Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade perfUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-develUpgrade kernel-libbpf-static | Oct 16, 2025 | Sep 4, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 6, 2024 | Sep 4, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Sep 4, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Dec 5, 2024 | Sep 4, 2024 |
| Suse | — | Upgrade ocfs2-kmp-rtUpgrade kernel-devel-rtUpgrade dtb-apmUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-docsUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade dtb-mediatekUpgrade dtb-renesasUpgrade kernel-debugUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade dlm-kmp-defaultUpgrade kernel-syms-azureUpgrade dtb-xilinxUpgrade dtb-amdUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-amlogicUpgrade kernel-syms-rtUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-sourceUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-rt_debugUpgrade kernel-default-livepatchUpgrade kernel-defaultUpgrade kernel-azureUpgrade kernel-rt-extraUpgrade kernel-azure-develUpgrade gfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade dtb-sprdUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade kernel-azure-optionalUpgrade kernel-debug-vdsoUpgrade dtb-nvidiaUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-default-base-rebuildUpgrade kernel-azure-extraUpgrade kselftests-kmp-azureUpgrade kernel-default-baseUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade kernel-default-livepatch-develUpgrade dtb-rockchipUpgrade dtb-freescaleUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade dtb-socionextUpgrade dtb-marvellUpgrade dtb-amazonUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-qcomUpgrade dtb-lgUpgrade dtb-caviumUpgrade kernel-default-develUpgrade dtb-broadcom | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-1135-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-125-genericUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-azureUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-genericUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-oemUpgrade linux-image-oem-24.04Upgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-5.4.0-200-genericUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-raspiUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1075-azureUpgrade linux-image-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-aws-lts-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04bUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-1140-azureUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1139-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-64k-6.8 | Nov 4, 2024 | Sep 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Sep 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub