CVE-2024-36018: nouveau/uvmm: fix addr/range calcs for remap operations
In the Linux kernel, the following vulnerability has been resolved:
nouveau/uvmm: fix addr/range calcs for remap operations
dEQP-VK.sparseresources.imagerebind.2darray.r64i.1281288 was causing a remap operation like the below.
opremap: prev: 0000003fffed0000 00000000000f0000 00000000a5abd18a 0000000000000000 opremap: next: opremap: unmap: 0000003fffed0000 0000000000100000 0 opmap: map: 0000003ffffc0000 0000000000010000 000000005b1ba33c 00000000000e0000
This was resulting in an unmap operation from 0x3fffed0000+0xf0000, 0x100000 which was corrupting the pagetables and oopsing the kernel.
Fixes the prev + unmap range calcs to use start/end and map back to addr/range.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1 - Upgrade
Upgrade
Linux kernel (nouveau/uvmm)to a version that resolves this vulnerability.Patch nouveau/uvmm: fix addr/range calcs for remap operations
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36018?
CVE-2024-36018 has a high severity rating due to its potential impact on the Linux kernel's remap operations.
How does CVE-2024-36018 affect system performance?
CVE-2024-36018 can lead to incorrect address calculations, which may potentially compromise system performance and stability.
How do I fix CVE-2024-36018?
To fix CVE-2024-36018, update to the patched versions of the Linux kernel: 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.10-1, or 6.12.11-1.
What software is affected by CVE-2024-36018?
CVE-2024-36018 affects the Linux kernel versions specified in the security update, particularly in Debian-based distributions.
Is CVE-2024-36018 a local or remote vulnerability?
CVE-2024-36018 is classified as a local vulnerability, requiring local system access to exploit.