CVE Database›Document archive›CVE-2024-42258

CVE-2024-42258

kernel: mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · August 12, 2024

Updated · October 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines

Yves-Alexis Perez reported commit 4ef9ad19e176 ("mm: huge_memory: don't force huge page alignment on 32 bit") didn't work for x86_32 [1]. It is because x86_32 uses CONFIG_X86_32 instead of CONFIG_32BIT.

!CONFIG_64BIT should cover all 32 bit machines.

[1] https://lore.kernel.org/linux-mm/CAHbLzkr1LwH3pcTgM+aGQ31ip2bKqiqEQ8=FQB+t2c3dhNKNHA@mail.gmail.com/

Statement

This vulnerability is rated as having a Low severity impact because it is restricted to 32-bit architectures and requires local execution, precluding remote exploitation. Supported Red Hat Enterprise Linux releases run exclusively on 64-bit architectures, where 64-bit configuration settings are active and the flawed conditional check is never triggered. Consequently, enterprise deployments on supported Red Hat platforms are not functionally exposed to this address space alignment defect.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE not specified