Riskcovery

CVE-2024-36018

nouveau/uvmm: fix addr/range calcs for remap operations

State
Published
Severity
7.8 High
Published
May 30, 2024
Updated
Aug 5, 2026
Reserved
May 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

nouveau/uvmm: fix addr/range calcs for remap operations

dEQP-VK.sparse_resources.image_rebind.2d_array.r64i.128_128_8 was causing a remap operation like the below.

op_remap: prev: 0000003fffed0000 00000000000f0000 00000000a5abd18a 0000000000000000 op_remap: next: op_remap: unmap: 0000003fffed0000 0000000000100000 0 op_map: map: 0000003ffffc0000 0000000000010000 000000005b1ba33c 00000000000e0000

This was resulting in an unmap operation from 0x3fffed0000+0xf0000, 0x100000 which was corrupting the pagetables and oopsing the kernel.

Fixes the prev + unmap range calcs to use start/end and map back to addr/range.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • b88baab828713ce0b49b185444b2ee83bed373a8 to before 692a51bebf4552bdf0a79ccd68d291182a26a569Affected
  • b88baab828713ce0b49b185444b2ee83bed373a8 to before 0c16020d2b69a602c8ae6a1dd2aac9a3023249d6Affected
  • b88baab828713ce0b49b185444b2ee83bed373a8 to before be141849ec00ef39935bf169c0f194ac70bf85ceAffected
LinuxLinux
  • 6.6Affected
  • before 6.6Not affected
  • 6.6.26 through 6.6.*Not affected
  • 6.8.5 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.