CVE-2024-42258
kernel: mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 12, 2024
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines
Yves-Alexis Perez reported commit 4ef9ad19e176 ("mm: huge_memory: don't force huge page alignment on 32 bit") didn't work for x86_32 [1]. It is because x86_32 uses CONFIG_X86_32 instead of CONFIG_32BIT.
!CONFIG_64BIT should cover all 32 bit machines.
[1] https://lore.kernel.org/linux-mm/CAHbLzkr1LwH3pcTgM+aGQ31ip2bKqiqEQ8=FQB+t2c3dhNKNHA@mail.gmail.com/
Statement
This vulnerability is rated as having a Low severity impact because it is restricted to 32-bit architectures and requires local execution, precluding remote exploitation. Supported Red Hat Enterprise Linux releases run exclusively on 64-bit architectures, where 64-bit configuration settings are active and the flawed conditional check is never triggered. Consequently, enterprise deployments on supported Red Hat platforms are not functionally exposed to this address space alignment defect.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE not specified