CVE-2024-26795: riscv: Sparse-Memory/vmemmap out-of-bounds fix
In the Linux kernel, the following vulnerability has been resolved:
riscv: Sparse-Memory/vmemmap out-of-bounds fix
Offset vmemmap so that the first page of vmemmap will be mapped to the first page of physical memory in order to ensure that vmemmap’s bounds will be respected during pfntopage()/pagetopfn() operations. The conversion macros will produce correct SV39/48/57 addresses for every possible/valid DRAMBASE inside the physical memory limits.
v2:Address Alex's comments
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26795?
CVE-2024-26795 has a moderate severity rating due to potential out-of-bounds memory access.
How do I fix CVE-2024-26795?
To fix CVE-2024-26795, upgrade to the patched kernel versions: 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
Which Linux kernel versions are affected by CVE-2024-26795?
CVE-2024-26795 affects earlier versions of the Linux kernel prior to the specified patches.
Is CVE-2024-26795 specific to any Linux distribution?
Yes, CVE-2024-26795 is reported in the Debian distribution of the Linux kernel.
What type of vulnerability is CVE-2024-26795?
CVE-2024-26795 is an out-of-bounds memory access vulnerability in the Linux kernel regarding vmemmap.