GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2024-42258 (GCVE-0-2024-42258)

Vulnerability from cvelistv5 – Published: 2024-08-12 14:16 – Updated: 2026-08-05 11:36
VLAI
Title
mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines
Summary
In the Linux kernel, the following vulnerability has been resolved: mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines Yves-Alexis Perez reported commit 4ef9ad19e176 ("mm: huge_memory: don't force huge page alignment on 32 bit") didn't work for x86_32 [1]. It is because x86_32 uses CONFIG_X86_32 instead of CONFIG_32BIT. !CONFIG_64BIT should cover all 32 bit machines. [1] https://lore.kernel.org/linux-mm/CAHbLzkr1LwH3pcTgM+aGQ31ip2bKqiqEQ8=FQB+t2c3dhNKNHA@mail.gmail.com/
Severity
7.1 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-09-10 16:12 UTC
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 87632bc9ecff5ded93433bc0fca428019bdd1cfe , < 89f2914dd4b47d2fad3deef0d700f9526d98d11f (git)
Affected: 6ea9aa8d97e6563676094cb35755884173269555 , < a5c399fe433a115e9d3693169b5f357f3194af0a (git)
Affected: 4ef9ad19e17676b9ef071309bc62020e2373705d , < 7e1f4efb8d6140b2ec79bf760c43e1fc186e8dfc (git)
Affected: 4ef9ad19e17676b9ef071309bc62020e2373705d , < d9592025000b3cf26c742f3505da7b83aedc26d5 (git)
Affected: 7432376c913381c5f24d373a87ff629bbde94b47 (git)
Affected: 6.1.81 , < 6.1.105 (semver)
Affected: 6.7.6 , < 6.8 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 6.8
Unaffected: 0 , < 6.8 (semver)
Unaffected: 6.1.105 , ≤ 6.1.* (semver)
Unaffected: 6.10.3 , ≤ 6.10.* (semver)
Unaffected: 6.11 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-42258",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T16:12:53.509414Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-12T17:33:33.852Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:02:53.962Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "mm/huge_memory.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "89f2914dd4b47d2fad3deef0d700f9526d98d11f",
              "status": "affected",
              "version": "87632bc9ecff5ded93433bc0fca428019bdd1cfe",
              "versionType": "git"
            },
            {
              "lessThan": "a5c399fe433a115e9d3693169b5f357f3194af0a",
              "status": "affected",
              "version": "6ea9aa8d97e6563676094cb35755884173269555",
              "versionType": "git"
            },
            {
              "lessThan": "7e1f4efb8d6140b2ec79bf760c43e1fc186e8dfc",
              "status": "affected",
              "version": "4ef9ad19e17676b9ef071309bc62020e2373705d",
              "versionType": "git"
            },
            {
              "lessThan": "d9592025000b3cf26c742f3505da7b83aedc26d5",
              "status": "affected",
              "version": "4ef9ad19e17676b9ef071309bc62020e2373705d",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "7432376c913381c5f24d373a87ff629bbde94b47",
              "versionType": "git"
            },
            {
              "lessThan": "6.1.105",
              "status": "affected",
              "version": "6.1.81",
              "versionType": "semver"
            },
            {
              "lessThan": "6.8",
              "status": "affected",
              "version": "6.7.6",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "mm/huge_memory.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.8"
            },
            {
              "lessThan": "6.8",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.105",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.11",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.105",
                  "versionStartIncluding": "6.1.81",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10.3",
                  "versionStartIncluding": "6.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11",
                  "versionStartIncluding": "6.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.7.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines\n\nYves-Alexis Perez reported commit 4ef9ad19e176 (\"mm: huge_memory: don\u0027t\nforce huge page alignment on 32 bit\") didn\u0027t work for x86_32 [1].  It is\nbecause x86_32 uses CONFIG_X86_32 instead of CONFIG_32BIT.\n\n!CONFIG_64BIT should cover all 32 bit machines.\n\n[1] https://lore.kernel.org/linux-mm/CAHbLzkr1LwH3pcTgM+aGQ31ip2bKqiqEQ8=FQB+t2c3dhNKNHA@mail.gmail.com/"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The flawed placement logic is reached only through local process address-space operations \u2014 `mmap(2)` for anonymous mappings \u22652MB and `execve(2)`/`ld.so` library loads on ext4/xfs/btrfs/fuse \u2014 with no network-facing input processing involved. An attacker needs local execution on the 32-bit target (i386 desktop/server, or ARM32-LPAE embedded/IoT/automotive controller).\nAC:L - The behaviour is fully deterministic with no race or memory-layout precondition: on any x86_32/ARM32 kernel with THP enabled (the Debian/Ubuntu i386 PAE default and common on ARM LPAE), every mapping \u22652MB is unconditionally rounded to a 2MB boundary, yielding a fixed, precomputable address. The attacker simply issues a large mmap or reads the predictable base of a large library.\nPR:L - Any ordinary unprivileged local user can allocate \u22652MB mappings and observe the zero-entropy 2MB-aligned placement, and can equally derive the now-deterministic library base addresses of other, more privileged processes. No capability, namespace, or administrative access is required.\nUI:N - No victim action is needed \u2014 the kernel applies the alignment automatically to every qualifying mapping in every process on the system, including long-running root daemons that are already mapped. The attacker acts entirely on their own.\nS:U - The weakened randomization and the address-space exhaustion are both confined to the same operating-system security authority; no VM, IOMMU, or sandbox boundary is crossed.\nC:H - With `mmap_rnd_bits` at the 32-bit default of 8, PMD alignment consumes every randomization bit, so ASLR is completely \u2014 not partially \u2014 defeated for all large mappings, exposing the exact address-space layout of arbitrary processes including setuid binaries and network daemons. This total loss of a core memory-confidentiality protection makes the contents of victim memory reliably locatable and disclosable, as the reporter demonstrated in the regreSSHion (CVE-2024-6387) context on i386.\nI:N - The defect only influences where mappings are placed; the padding arithmetic retains its overflow guards and the returned address stays inside the reserved region, so no out-of-bounds write, use-after-free, or other data-modification primitive arises from the flaw itself.\nA:H - Forcing 2MB alignment on the 2\u20133GB 32-bit user address space leaves multi-megabyte holes between mappings, and the resulting fragmentation was reported in practice as mmap failures and premature OOM on openSUSE i586 and Android compat workloads. On a 32-bit embedded or industrial controller this causes the primary workload to fail allocations and be OOM-killed, denying service."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:36:07.867Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/89f2914dd4b47d2fad3deef0d700f9526d98d11f"
        },
        {
          "url": "https://git.kernel.org/stable/c/a5c399fe433a115e9d3693169b5f357f3194af0a"
        },
        {
          "url": "https://git.kernel.org/stable/c/7e1f4efb8d6140b2ec79bf760c43e1fc186e8dfc"
        },
        {
          "url": "https://git.kernel.org/stable/c/d9592025000b3cf26c742f3505da7b83aedc26d5"
        }
      ],
      "title": "mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-42258",
    "datePublished": "2024-08-12T14:16:13.227Z",
    "dateReserved": "2024-07-30T07:40:12.257Z",
    "dateUpdated": "2026-08-05T11:36:07.867Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-42258",
      "date": "2026-09-17",
      "epss": "0.0022",
      "percentile": "0.12693"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-42258\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-08-12T15:15:20.983\",\"lastModified\":\"2026-08-04T11:19:42.900\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nmm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines\\n\\nYves-Alexis Perez reported commit 4ef9ad19e176 (\\\"mm: huge_memory: don\u0027t\\nforce huge page alignment on 32 bit\\\") didn\u0027t work for x86_32 [1].  It is\\nbecause x86_32 uses CONFIG_X86_32 instead of CONFIG_32BIT.\\n\\n!CONFIG_64BIT should cover all 32 bit machines.\\n\\n[1] https://lore.kernel.org/linux-mm/CAHbLzkr1LwH3pcTgM+aGQ31ip2bKqiqEQ8=FQB+t2c3dhNKNHA@mail.gmail.com/\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mm: enorme_memoria: use! CONFIG_64BIT para relajar la alineaci\u00f3n de p\u00e1ginas enormes en m\u00e1quinas de 32 bits Yves-Alexis Perez inform\u00f3 el commit 4ef9ad19e176 (\\\"mm: memoria_enorme: no fuerce la alineaci\u00f3n de p\u00e1ginas enormes en 32 bit\\\") no funcion\u00f3 para x86_32 [1]. Es porque x86_32 usa CONFIG_X86_32 en lugar de CONFIG_32BIT. !CONFIG_64BIT deber\u00eda cubrir todas las m\u00e1quinas de 32 bits. [1] https://lore.kernel.org/linux-mm/CAHbLzkr1LwH3pcTgM+aGQ31ip2bKqiqEQ8=FQB+t2c3dhNKNHA@mail.gmail.com/\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"mm/huge_memory.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"87632bc9ecff5ded93433bc0fca428019bdd1cfe\",\"lessThan\":\"89f2914dd4b47d2fad3deef0d700f9526d98d11f\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6ea9aa8d97e6563676094cb35755884173269555\",\"lessThan\":\"a5c399fe433a115e9d3693169b5f357f3194af0a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4ef9ad19e17676b9ef071309bc62020e2373705d\",\"lessThan\":\"7e1f4efb8d6140b2ec79bf760c43e1fc186e8dfc\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4ef9ad19e17676b9ef071309bc62020e2373705d\",\"lessThan\":\"d9592025000b3cf26c742f3505da7b83aedc26d5\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"7432376c913381c5f24d373a87ff629bbde94b47\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6.1.81\",\"lessThan\":\"6.1.105\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.7.6\",\"lessThan\":\"6.8\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"mm/huge_memory.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.8\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"6.8\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.105\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.10.3\",\"lessThanOrEqual\":\"6.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.11\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H\",\"baseScore\":7.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.2},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-09-10T16:12:53.509414Z\",\"id\":\"CVE-2024-42258\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-770\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.8\",\"versionEndExcluding\":\"6.10.3\",\"matchCriteriaId\":\"38E515B9-DAD5-4A5A-9C4C-1B6873D3185A\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/7e1f4efb8d6140b2ec79bf760c43e1fc186e8dfc\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/89f2914dd4b47d2fad3deef0d700f9526d98d11f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/a5c399fe433a115e9d3693169b5f357f3194af0a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/d9592025000b3cf26c742f3505da7b83aedc26d5\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-08-04T22:43:08+00:00",
      "cve": "CVE-2024-42258",
      "id": "CVE-2024-42258",
      "initial_release_date": "2024-08-12T00:00:00+00:00",
      "product_status:fixed": "280",
      "product_status:known_affected": "50",
      "product_status:known_not_affected": "70",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-42258.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T22:02:53.962Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-42258\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-10T16:12:53.509414Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-11T12:42:24.013Z\"}}], \"cna\": {\"title\": \"mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"87632bc9ecff5ded93433bc0fca428019bdd1cfe\", \"lessThan\": \"89f2914dd4b47d2fad3deef0d700f9526d98d11f\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"6ea9aa8d97e6563676094cb35755884173269555\", \"lessThan\": \"a5c399fe433a115e9d3693169b5f357f3194af0a\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"4ef9ad19e17676b9ef071309bc62020e2373705d\", \"lessThan\": \"7e1f4efb8d6140b2ec79bf760c43e1fc186e8dfc\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"4ef9ad19e17676b9ef071309bc62020e2373705d\", \"lessThan\": \"d9592025000b3cf26c742f3505da7b83aedc26d5\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"7432376c913381c5f24d373a87ff629bbde94b47\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"6.1.81\", \"lessThan\": \"6.1.105\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"6.7.6\", \"lessThan\": \"6.8\", \"versionType\": \"semver\"}], \"programFiles\": [\"mm/huge_memory.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.8\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"6.8\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"6.1.105\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.10.3\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.10.*\"}, {\"status\": \"unaffected\", \"version\": \"6.11\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"mm/huge_memory.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/89f2914dd4b47d2fad3deef0d700f9526d98d11f\"}, {\"url\": \"https://git.kernel.org/stable/c/a5c399fe433a115e9d3693169b5f357f3194af0a\"}, {\"url\": \"https://git.kernel.org/stable/c/7e1f4efb8d6140b2ec79bf760c43e1fc186e8dfc\"}, {\"url\": \"https://git.kernel.org/stable/c/d9592025000b3cf26c742f3505da7b83aedc26d5\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nmm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines\\n\\nYves-Alexis Perez reported commit 4ef9ad19e176 (\\\"mm: huge_memory: don\u0027t\\nforce huge page alignment on 32 bit\\\") didn\u0027t work for x86_32 [1].  It is\\nbecause x86_32 uses CONFIG_X86_32 instead of CONFIG_32BIT.\\n\\n!CONFIG_64BIT should cover all 32 bit machines.\\n\\n[1] https://lore.kernel.org/linux-mm/CAHbLzkr1LwH3pcTgM+aGQ31ip2bKqiqEQ8=FQB+t2c3dhNKNHA@mail.gmail.com/\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.105\", \"versionStartIncluding\": \"6.1.81\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.10.3\", \"versionStartIncluding\": \"6.8\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.11\", \"versionStartIncluding\": \"6.8\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"6.7.6\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-05-23T15:52:30.245Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-42258\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-23T15:52:30.245Z\", \"dateReserved\": \"2024-07-30T07:40:12.257Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-08-12T14:16:13.227Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.