{"id":"CVE-2024-44965","revision":"235537f46aac46ee8b18bd697977b7ea","records":[{"revision":"235537f46aac46ee8b18bd697977b7ea","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-44965","aliases":[],"title":"x86/mm: Fix pti_clone_pgtable() alignment assumption","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nx86/mm: Fix pti_clone_pgtable() alignment assumption\n\nGuenter reported dodgy crashes on an i386-nosmp build using GCC-11\nthat had the form of endless traps until entry stack exhaust and then\n#DF from the stack guard.\n\nIt turned out that pti_clone_pgtable() had alignment assumptions on\nthe start address, notably it hard assumes start is PMD aligned. This\nis true on x86_64, but very much not true on i386.\n\nThese assumptions can cause the end condition to malfunction, leading\nto a 'short' clone. Guess what happens when the user mapping has a\nshort copy of the entry text?\n\nUse the correct increment form for addr to avoid alignment\nassumptions.","state":0,"publishedAt":"2024-09-04T18:36:02.762+00:00","modifiedAt":"2026-10-15T00:49:37.897+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"arch/x86/mm/pti.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"16a3fe634f6a568c6234b8747e5d50487fed3526\",\n                            \"lessThan\": \"18da1b27ce16a14a9b636af9232acb4fb24f4c9e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"16a3fe634f6a568c6234b8747e5d50487fed3526\",\n                            \"lessThan\": \"25a727233a40a9b33370eec9f0cad67d8fd312f8\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"16a3fe634f6a568c6234b8747e5d50487fed3526\",\n                            \"lessThan\": \"d00c9b4bbc442d99e1dafbdfdab848bc1ead73f6\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"16a3fe634f6a568c6234b8747e5d50487fed3526\",\n                            \"lessThan\": \"4d143ae782009b43b4f366402e5c37f59d4e4346\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"16a3fe634f6a568c6234b8747e5d50487fed3526\",\n                            \"lessThan\": \"5c580c1050bcbc15c3e78090859d798dcf8c9763\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"16a3fe634f6a568c6234b8747e5d50487fed3526\",\n                            \"lessThan\": \"ca07aab70dd3b5e7fddb62d7a6ecd7a7d6d0b2ed\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"16a3fe634f6a568c6234b8747e5d50487fed3526\",\n                            \"lessThan\": \"df3eecb5496f87263d171b254ca6e2758ab3c35c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"16a3fe634f6a568c6234b8747e5d50487fed3526\",\n                            \"lessThan\": \"41e71dbb0e0a0fe214545fe64af031303a08524c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"arch/x86/mm/pti.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4.19\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.19\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"4.19.320\",\n                            \"lessThanOrEqual\": \"4.19.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.282\",\n                            \"lessThanOrEqual\": \"5.4.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.224\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.165\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.105\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.46\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.10.5\",\n                            \"lessThanOrEqual\": \"6.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.11\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/18da1b27ce16a14a9b636af9232acb4fb24f4c9e","https://git.kernel.org/stable/c/25a727233a40a9b33370eec9f0cad67d8fd312f8","https://git.kernel.org/stable/c/d00c9b4bbc442d99e1dafbdfdab848bc1ead73f6","https://git.kernel.org/stable/c/4d143ae782009b43b4f366402e5c37f59d4e4346","https://git.kernel.org/stable/c/5c580c1050bcbc15c3e78090859d798dcf8c9763","https://git.kernel.org/stable/c/ca07aab70dd3b5e7fddb62d7a6ecd7a7d6d0b2ed","https://git.kernel.org/stable/c/df3eecb5496f87263d171b254ca6e2758ab3c35c","https://git.kernel.org/stable/c/41e71dbb0e0a0fe214545fe64af031303a08524c"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-44965","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-44965","identifiers":["CVE-2024-44965"]},"retained":false,"historicalAffected":[]}],"coverage":[]}