CVE-2024-26912

drm/nouveau: fix several DMA buffer leaks

State
Published
Severity
Not scored
Published
Apr 17, 2024
Updated
May 11, 2026
Reserved
Feb 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/nouveau: fix several DMA buffer leaks

Nouveau manages GSP-RM DMA buffers with nvkm_gsp_mem objects. Several of these buffers are never dealloced. Some of them can be deallocated right after GSP-RM is initialized, but the rest need to stay until the driver unloads.

Also futher bullet-proof these objects by poisoning the buffer and clearing the nvkm_gsp_mem object when it is deallocated. Poisoning the buffer should trigger an error (or crash) from GSP-RM if it tries to access the buffer after we've deallocated it, because we were wrong about when it is safe to deallocate.

Finally, change the mem->size field to a size_t because that's the same type that dma_alloc_coherent expects.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 176fdcbddfd288408ce8571c1760ad618d962096 to before 6190d4c08897d748dd25f0b78267a90aa1694e15Affected
  • 176fdcbddfd288408ce8571c1760ad618d962096 to before 042b5f83841fbf7ce39474412db3b5e4765a7ea7Affected
LinuxLinux
  • 6.7Affected
  • before 6.7Not affected
  • 6.7.6 through 6.7.*Not affected
  • 6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.