CVE-2024-36018

Description

In the Linux kernel, the following vulnerability has been resolved: nouveau/uvmm: fix addr/range calcs for remap operations dEQP-VK.sparse_resources.image_rebind.2d_array.r64i.128_128_8 was causing a remap operation like the below. op_remap: prev: 0000003fffed0000 00000000000f0000 00000000a5abd18a 0000000000000000 op_remap: next: op_remap: unmap: 0000003fffed0000 0000000000100000 0 op_map: map: 0000003ffffc0000 0000000000010000 000000005b1ba33c 00000000000e0000 This was resulting in an unmap operation from 0x3fffed0000+0xf0000, 0x100000 which was corrupting the pagetables and oopsing the kernel. Fixes the prev + unmap range calcs to use start/end and map back to addr/range.

Reserved 2024-05-17 | Published 2024-05-30 | Updated 2025-05-04 | Assigner Linux

Product status

Default status
unaffected

b88baab828713ce0b49b185444b2ee83bed373a8 before 692a51bebf4552bdf0a79ccd68d291182a26a569
affected

b88baab828713ce0b49b185444b2ee83bed373a8 before 0c16020d2b69a602c8ae6a1dd2aac9a3023249d6
affected

b88baab828713ce0b49b185444b2ee83bed373a8 before be141849ec00ef39935bf169c0f194ac70bf85ce
affected

Default status
affected

6.6
affected

Any version before 6.6
unaffected

6.6.26
unaffected

6.8.5
unaffected

6.9
unaffected

References

git.kernel.org/...c/692a51bebf4552bdf0a79ccd68d291182a26a569

git.kernel.org/...c/0c16020d2b69a602c8ae6a1dd2aac9a3023249d6

git.kernel.org/...c/be141849ec00ef39935bf169c0f194ac70bf85ce

cve.org (CVE-2024-36018)

nvd.nist.gov (CVE-2024-36018)

Download JSON