vulnerability
Ubuntu: (Multiple Advisories) (CVE-2024-44965): Linux kernel vulnerabilities
Severity | CVSS | Published | Added | Modified |
---|---|---|---|---|
5 | (AV:L/AC:L/Au:S/C:N/I:N/A:C) | Sep 4, 2024 | Nov 4, 2024 | Jan 30, 2025 |
Description
In the Linux kernel, the following vulnerability has been resolved:
x86/mm: Fix pti_clone_pgtable() alignment assumption
Guenter reported dodgy crashes on an i386-nosmp build using GCC-11
that had the form of endless traps until entry stack exhaust and then
#DF from the stack guard.
It turned out that pti_clone_pgtable() had alignment assumptions on
the start address, notably it hard assumes start is PMD aligned. This
is true on x86_64, but very much not true on i386.
These assumptions can cause the end condition to malfunction, leading
to a 'short' clone. Guess what happens when the user mapping has a
short copy of the entry text?
Use the correct increment form for addr to avoid alignment
assumptions.
Solution(s)
References
- CVE-2024-44965
- https://attackerkb.com/topics/CVE-2024-44965
- UBUNTU-USN-7088-1
- UBUNTU-USN-7088-2
- UBUNTU-USN-7088-3
- UBUNTU-USN-7088-4
- UBUNTU-USN-7088-5
- UBUNTU-USN-7100-1
- UBUNTU-USN-7100-2
- UBUNTU-USN-7119-1
- UBUNTU-USN-7123-1
- UBUNTU-USN-7144-1
- UBUNTU-USN-7154-1
- UBUNTU-USN-7154-2
- UBUNTU-USN-7155-1
- UBUNTU-USN-7156-1
- UBUNTU-USN-7194-1
- UBUNTU-USN-7196-1

Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.