CVE-2024-36018

High

Description

In the Linux kernel, the following vulnerability has been resolved: nouveau/uvmm: fix addr/range calcs for remap operations dEQP-VK.sparse_resources.image_rebind.2d_array.r64i.128_128_8 was causing a remap operation like the below. op_remap: prev: 0000003fffed0000 00000000000f0000 00000000a5abd18a 0000000000000000 op_remap: next: op_remap: unmap: 0000003fffed0000 0000000000100000 0 op_map: map: 0000003ffffc0000 0000000000010000 000000005b1ba33c 00000000000e0000 This was resulting in an unmap operation from 0x3fffed0000+0xf0000, 0x100000 which was corrupting the pagetables and oopsing the kernel. Fixes the prev + unmap range calcs to use start/end and map back to addr/range.

SeverityHigh
CVSS7.8
Exploit probability—
ProductLinux Kernel
PublishedMay 30, 2024
First seenMay 30, 2024

How to fix

Update
  • linux linux_kernel6.6.26, 6.8.5 or later

Affected products

ProductAffected versionsFixed in
linux linux_kernel6.6 ≤ v < 6.6.26, 6.7 ≤ v < 6.8.5, 6.96.6.26, 6.8.5

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2024-36018 · Linux Kernel · Dark Radar