CVE-2024-26621
In the Linux kernel, the following vulnerability has been resolved: mm: huge_memory: don't force huge page alignment on 32 bit commit efa7df3e3bb5 ("mm: align larger anonymous mappings on THP boundaries") caused two issues [1] [2] reported on 32 bit…
Does this matter?
Lower severity and a low EPSS score (1.01%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: mm: huge_memory: don't force huge page alignment on 32 bit commit efa7df3e3bb5 ("mm: align larger anonymous mappings on THP boundaries") caused two issues [1] [2] reported on 32 bit system or compat userspace. It doesn't make too much sense to force huge page alignment on 32 bit system due to the constrained virtual address space. [1] https://lore.kernel.org/linux-mm/d0a136a0-4a31-46bc-adf4-2db109a61672@kernel.org/ [2] https://lore.kernel.org/linux-mm/CAJuCfpHXLdQy1a2B6xN2d7quTYwg2OoZseYPZTRpU0eHHKD-sQ@mail.gmail.com/
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 1.01% probability · 61th percentile
- CISA KEV
- Not listed
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/4ef9ad19e17676b9ef071309bc62020e2373705dPatch
- https://git.kernel.org/stable/c/6ea9aa8d97e6563676094cb35755884173269555Patch
- https://git.kernel.org/stable/c/7432376c913381c5f24d373a87ff629bbde94b47Patch
- https://git.kernel.org/stable/c/87632bc9ecff5ded93433bc0fca428019bdd1cfePatch
- http://www.openwall.com/lists/oss-security/2024/07/08/3Patch
- http://www.openwall.com/lists/oss-security/2024/07/08/4Patch
- http://www.openwall.com/lists/oss-security/2024/07/08/5Patch
- http://www.openwall.com/lists/oss-security/2024/07/08/6Patch
- http://www.openwall.com/lists/oss-security/2024/07/08/7Patch
- http://www.openwall.com/lists/oss-security/2024/07/08/8Patch
- http://www.openwall.com/lists/oss-security/2024/07/09/1Patch
- http://www.openwall.com/lists/oss-security/2024/07/10/5Patch
- http://www.openwall.com/lists/oss-security/2024/07/10/7Patch
- http://www.openwall.com/lists/oss-security/2024/07/10/8Patch
- http://www.openwall.com/lists/oss-security/2024/07/11/4Patch
- http://www.openwall.com/lists/oss-security/2024/07/11/5Patch
- http://www.openwall.com/lists/oss-security/2024/07/11/7Patch
- http://www.openwall.com/lists/oss-security/2024/07/12/3Patch
- http://www.openwall.com/lists/oss-security/2024/07/13/2Patch
- http://www.openwall.com/lists/oss-security/2024/07/13/7Patch
- http://www.openwall.com/lists/oss-security/2024/07/15/1Patch
- http://www.openwall.com/lists/oss-security/2024/07/15/2Patch
- http://www.openwall.com/lists/oss-security/2024/07/16/1Patch
- http://www.openwall.com/lists/oss-security/2024/07/16/2Patch
- http://www.openwall.com/lists/oss-security/2024/07/29/2Patch
- http://www.openwall.com/lists/oss-security/2024/07/30/2Patch
- https://git.kernel.org/stable/c/4ef9ad19e17676b9ef071309bc62020e2373705dPatch
- https://git.kernel.org/stable/c/7432376c913381c5f24d373a87ff629bbde94b47Patch
- https://git.kernel.org/stable/c/87632bc9ecff5ded93433bc0fca428019bdd1cfePatch
- https://zolutal.github.io/aslrnt/Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.