CVE-2024-51729CWE-787

CVE-2024-51729

High · published January 11, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
11.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

mm: use aligned address in copy_user_gigantic_page()

In current kernel, hugetlb_wp() calls copy_user_large_folio() with the

fault address. Where the fault address may be not aligned with the huge

page size. Then, copy_user_large_folio() may call

copy_user_gigantic_page() with the address, while

copy_user_gigantic_page() requires the address to be huge page size

aligned. So, this may cause memory corruption or information leak,

addtional, use more obvious naming 'addr_hint' instead of 'addr' for

copy_user_gigantic_page().

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00214 · 11.2th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-01-11T18:15Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel≥ 6.11, < 6.12.76.12.7
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (2)
EPSS history
Timeline
  • 11 JAN 12:35Z
    mm: use aligned address in copy_user_gigantic_page()
    cvelistv5