In the Linux kernel, the following vulnerability has been resolved:
x86/mm: Fix pti_clone_pgtable() alignment assumption
Guenter reported dodgy crashes on an i386-nosmp build using GCC-11 that had the form of endless traps until entry stack exhaust and then #DF from the stack guard.
It turned out that pti_clone_pgtable() had alignment assumptions on the start address, notably it hard assumes start is PMD aligned. This is true on x86_64, but very much not true on i386.
These assumptions can cause the end condition to malfunction, leading to a 'short' clone. Guess what happens when the user mapping has a short copy of the entry text?
Use the correct increment form for addr to avoid alignment assumptions.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.165-110.161Upgrade bpftoolUpgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.224-212.876 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.106-116.188Upgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade python3-perfUpgrade perf | Oct 16, 2025 | Sep 4, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 6, 2024 | Sep 4, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Sep 4, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Dec 5, 2024 | Sep 4, 2024 |
| Suse | — | Upgrade dtb-nvidiaUpgrade kernel-source-rtUpgrade dtb-rockchipUpgrade kernel-default-vdsoUpgrade dtb-lgUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-rtUpgrade kernel-rt_debug-develUpgrade dtb-appleUpgrade kernel-default-base-rebuildUpgrade kernel-obs-buildUpgrade kernel-azure-extraUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade ocfs2-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-defaultUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-broadcomUpgrade kernel-azureUpgrade kernel-rt_debugUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-rtUpgrade kernel-default-baseUpgrade dtb-qcomUpgrade kernel-docs-htmlUpgrade dtb-exynosUpgrade kernel-debug-vdsoUpgrade kernel-default-develUpgrade dtb-marvellUpgrade kernel-64kb-extraUpgrade dtb-alteraUpgrade dtb-socionextUpgrade dtb-allwinnerUpgrade dtb-amazonUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-sourceUpgrade dtb-sprdUpgrade dtb-hisiliconUpgrade dtb-amlogicUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade dtb-apmUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-rt-develUpgrade dtb-armUpgrade dlm-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-docsUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade kernel-debugUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-azure-vdsoUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-amdUpgrade dlm-kmp-azureUpgrade kernel-syms-rtUpgrade kselftests-kmp-rtUpgrade kernel-default-extraUpgrade kernel-default-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-devel | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-intel-iotgUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1072-awsUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1075-azureUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-gkeop-6.8Upgrade linux-image-virtualUpgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-genericUpgrade linux-image-5.4.0-200-genericUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1135-awsUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-oemUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-gkeopUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-gkeUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-oem-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1140-azureUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspi2Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1139-azureUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-5.4.0-200-lowlatency | Nov 4, 2024 | Sep 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Sep 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub