CVE-2024-35987: riscv: Fix loading 64-bit NOMMU kernels past the start of RAM
In the Linux kernel, the following vulnerability has been resolved:
riscv: Fix loading 64-bit NOMMU kernels past the start of RAM
commit 3335068f8721 ("riscv: Use PUD/P4D/PGD pages for the linear mapping") added logic to allow using RAM below the kernel load address. However, this does not work for NOMMU, where PAGEOFFSET is fixed to the kernel load address. Since that range of memory corresponds to PFNs below ARCHPFNOFFSET, mm initialization runs off the beginning of memmap and corrupts adjacent kernel memory. Fix this by restoring the previous behavior for NOMMU kernels.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35987?
CVE-2024-35987 has a severity rating that may range from low to high depending on the system configuration.
How do I fix CVE-2024-35987?
To mitigate CVE-2024-35987, update your Linux kernel to the fixed versions such as 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.13-1.
What systems are affected by CVE-2024-35987?
CVE-2024-35987 affects Linux kernel versions prior to the patched releases, specifically in Debian distributions.
Is CVE-2024-35987 exploitative in nature?
CVE-2024-35987 could potentially be exploited to load 64-bit NOMMU kernels improperly, posing security risks.
What is the impact of CVE-2024-35987 on Linux performance?
The impact of CVE-2024-35987 on Linux performance may vary but could lead to system instability if not patched.