CVE-2024-35988: riscv: Fix TASK_SIZE on 64-bit NOMMU
In the Linux kernel, the following vulnerability has been resolved:
riscv: Fix TASKSIZE on 64-bit NOMMU
On NOMMU, userspace memory can come from anywhere in physical RAM. The current definition of TASKSIZE is wrong if any RAM exists above 4G, causing spurious failures in the userspace access routines.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35988?
CVE-2024-35988 is classified as a moderate severity vulnerability.
How do I fix CVE-2024-35988?
To fix CVE-2024-35988, you should upgrade to the patched versions of the Linux kernel: 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
What systems are affected by CVE-2024-35988?
CVE-2024-35988 affects the Linux kernel versions prior to the aforementioned patched releases.
What type of vulnerability is CVE-2024-35988?
CVE-2024-35988 is a vulnerability in the Linux kernel related to memory addressing on 64-bit NOMMU systems.
Can CVE-2024-35988 lead to information disclosure?
Yes, CVE-2024-35988 can potentially lead to unexpected behavior and spurious failures in user processes, which may result in information disclosure.