CVE-2024-42259

drm/i915/gem: Fix Virtual Memory mapping boundaries calculation

State: Published
Severity: 7.8 High
Published: Aug 14, 2024
Updated: Oct 15, 2026
Reserved: Jul 30, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/i915/gem: Fix Virtual Memory mapping boundaries calculation

Calculating the size of the mapped area as the lesser value between the requested size and the actual size does not consider the partial mapping offset. This can cause page fault access.

Fix the calculation of the starting and ending addresses, the total size is now deduced from the difference between the end and start addresses.

Additionally, the calculations have been rewritten in a clearer and more understandable form.

[Joonas: Add Requires: tag] Requires: 60a2066c5005 ("drm/i915/gem: Adjust vma offset for framebuffer mmap offset") (cherry picked from commit 97b6784753da06d9d40232328efc5c5367e53417)

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	c58305af1835095ddc25ee6f548ac05915e66ac5 to before 3e06073d24807f04b4694108a8474decb7b99e60Affected c58305af1835095ddc25ee6f548ac05915e66ac5 to before a256d019eaf044864c7e50312f0a65b323c24f39Affected c58305af1835095ddc25ee6f548ac05915e66ac5 to before 50111a8098fb9ade621eeff82228a997d42732abAffected c58305af1835095ddc25ee6f548ac05915e66ac5 to before 911f8055f175c82775d0fd8cedcd0b75413f4ba7Affected c58305af1835095ddc25ee6f548ac05915e66ac5 to before e8a68aa842d3f8dd04a46b9d632e5f67fde1da9bAffected c58305af1835095ddc25ee6f548ac05915e66ac5 to before 4b09513ce93b3dcb590baaaff2ce96f2d098312dAffected c58305af1835095ddc25ee6f548ac05915e66ac5 to before ead9289a51ea82eb5b27029fcf4c34b2dd60cf06Affected c58305af1835095ddc25ee6f548ac05915e66ac5 to before 8bdd9ef7e9b1b2a73e394712b72b22055e0e26c3Affected
LinuxLinux	4.9Affected before 4.9Not affected 4.19.320 through 4.19.Not affected 5.4.282 through 5.4.Not affected 5.10.224 through 5.10.Not affected 5.15.165 through 5.15.Not affected 6.1.106 through 6.1.Not affected 6.6.46 through 6.6.Not affected 6.10.5 through 6.10.*Not affected 6.11 and laterNot affected

Product

Versions

LinuxLinux

c58305af1835095ddc25ee6f548ac05915e66ac5 to before 3e06073d24807f04b4694108a8474decb7b99e60Affected
c58305af1835095ddc25ee6f548ac05915e66ac5 to before a256d019eaf044864c7e50312f0a65b323c24f39Affected
c58305af1835095ddc25ee6f548ac05915e66ac5 to before 50111a8098fb9ade621eeff82228a997d42732abAffected
c58305af1835095ddc25ee6f548ac05915e66ac5 to before 911f8055f175c82775d0fd8cedcd0b75413f4ba7Affected
c58305af1835095ddc25ee6f548ac05915e66ac5 to before e8a68aa842d3f8dd04a46b9d632e5f67fde1da9bAffected
c58305af1835095ddc25ee6f548ac05915e66ac5 to before 4b09513ce93b3dcb590baaaff2ce96f2d098312dAffected
c58305af1835095ddc25ee6f548ac05915e66ac5 to before ead9289a51ea82eb5b27029fcf4c34b2dd60cf06Affected
c58305af1835095ddc25ee6f548ac05915e66ac5 to before 8bdd9ef7e9b1b2a73e394712b72b22055e0e26c3Affected

LinuxLinux

4.9Affected
before 4.9Not affected
4.19.320 through 4.19.*Not affected
5.4.282 through 5.4.*Not affected
5.10.224 through 5.10.*Not affected
5.15.165 through 5.15.*Not affected
6.1.106 through 6.1.*Not affected
6.6.46 through 6.6.*Not affected
6.10.5 through 6.10.*Not affected
6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.