Riskcovery

CVE-2024-35987

riscv: Fix loading 64-bit NOMMU kernels past the start of RAM

State
Published
Severity
8.4 High
Published
May 20, 2024
Updated
Aug 5, 2026
Reserved
May 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

riscv: Fix loading 64-bit NOMMU kernels past the start of RAM

commit 3335068f8721 ("riscv: Use PUD/P4D/PGD pages for the linear mapping") added logic to allow using RAM below the kernel load address. However, this does not work for NOMMU, where PAGE_OFFSET is fixed to the kernel load address. Since that range of memory corresponds to PFNs below ARCH_PFN_OFFSET, mm initialization runs off the beginning of mem_map and corrupts adjacent kernel memory. Fix this by restoring the previous behavior for NOMMU kernels.

Scores

CVSSScoreVectorSource
3.18.4 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3335068f87217ea59d08f462187dc856652eea15 to before b008e327fa570aca210f98c817757649bae56694Affected
  • 3335068f87217ea59d08f462187dc856652eea15 to before ea6628e4e2353978af7e3b4ad4fdaab6149acf3dAffected
  • 3335068f87217ea59d08f462187dc856652eea15 to before aea702dde7e9876fb00571a2602f25130847bf0fAffected
LinuxLinux
  • 6.4Affected
  • before 6.4Not affected
  • 6.6.30 through 6.6.*Not affected
  • 6.8.9 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.