CVE-2024-26621

CVE-2024-26621

High · published March 3, 2024

CVSS v3.1
8.2
EPSS
1%
Percentile
63.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

mm: huge_memory: don't force huge page alignment on 32 bit

commit efa7df3e3bb5 ("mm: align larger anonymous mappings on THP

boundaries") caused two issues [1] [2] reported on 32 bit system or compat

userspace.

It doesn't make too much sense to force huge page alignment on 32 bit

system due to the constrained virtual address space.

[1] https://lore.kernel.org/linux-mm/[email protected]/

[2] https://lore.kernel.org/linux-mm/CAJuCfpHXLdQy1a2B6xN2d7quTYwg2OoZseYPZTRpU0eHHKD-sQ@mail.gmail.com/

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01014 · 63.0th percentile
Published
2024-03-03T03:15Z
Affected products (5)
ProductVersionsFixed in
linux/linux_kernel≥ 5.18, < 6.1.816.1.81
linux/linux_kernel≥ 6.2, < 6.6.466.6.46
linux/linux_kernel≥ 6.7, < 6.7.66.7.6
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (30)
https://git.kernel.org/stable/c/4ef9ad19e17676b9ef071309bc62020e2373705d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6ea9aa8d97e6563676094cb35755884173269555 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/7432376c913381c5f24d373a87ff629bbde94b47 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/87632bc9ecff5ded93433bc0fca428019bdd1cfe · 416baaa9-dc9f-4396-8d5f-8c081fb06d67http://www.openwall.com/lists/oss-security/2024/07/08/3 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2024/07/08/4 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2024/07/08/5 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2024/07/08/6 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2024/07/08/7 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2024/07/08/8 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2024/07/09/1 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2024/07/10/5 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2024/07/10/7 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2024/07/10/8 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2024/07/11/4 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2024/07/11/5 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2024/07/11/7 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2024/07/12/3 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2024/07/13/2 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2024/07/13/7 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2024/07/15/1 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2024/07/15/2 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2024/07/16/1 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2024/07/16/2 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2024/07/29/2 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2024/07/30/2 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/4ef9ad19e17676b9ef071309bc62020e2373705d · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/7432376c913381c5f24d373a87ff629bbde94b47 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/87632bc9ecff5ded93433bc0fca428019bdd1cfe · af854a3a-2127-422b-91ae-364da2661108https://zolutal.github.io/aslrnt/ · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 02 MAR 21:31Z
    mm: huge_memory: don't force huge page alignment on 32 bit
    cvelistv5