Log in Start free

Vulnerability · Published Aug 14, 2024 · Assigned by Linux

CVE-2024-42259drm/i915/gem: Fix Virtual Memory mapping boundaries calculation

High 7.8

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.3%top 81.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix Virtual Memory mapping boundaries calculation Calculating the size of the mapped area as the lesser value between the requested size and the actual size does not consider the partial mapping offset. This can cause page fault access. Fix the calculation of the starting and ending addresses, the total size is now deduced from the difference between the end and start addresses. Additionally, the calculations have been rewritten in a clearer and more understandable form. [Joonas: Add Requires: tag] Requires: 60a2066c5005 ("drm/i915/gem: Adjust vma offset for framebuffer mmap offset") (cherry picked from commit 97b6784753da06d9d40232328efc5c5367e53417)

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.106-1DEBIAN-CVE-2024-42259
Debian:13linux6.10.6-1DEBIAN-CVE-2024-42259
Debian:14linux6.10.6-1DEBIAN-CVE-2024-42259
Ubuntu:22.04:LTSlinux5.15.0-125.135UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux5.15.0-125.135USN-7100-1
Ubuntu:24.04:LTSlinux6.8.0-50.51USN-7154-1
Ubuntu:24.04:LTSlinux6.8.0-50.51UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-aws5.15.0-1072.78UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-aws5.15.0-1072.78USN-7100-2
Ubuntu:24.04:LTSlinux-aws6.8.0-1020.22USN-7154-1
Ubuntu:24.04:LTSlinux-aws6.8.0-1020.22UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1020.22~22.04.1USN-7154-1
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1020.22~22.04.1UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-azure5.15.0-1075.84USN-7123-1
Ubuntu:22.04:LTSlinux-azure5.15.0-1075.84UBUNTU-CVE-2024-42259
Ubuntu:24.04:LTSlinux-azure6.8.0-1020.23UBUNTU-CVE-2024-42259
Ubuntu:24.04:LTSlinux-azure6.8.0-1020.23USN-7196-1
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1020.23~22.04.1UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1020.23~22.04.1USN-7196-1
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1076.85.1UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-gcp5.15.0-1071.79USN-7100-1
Ubuntu:22.04:LTSlinux-gcp5.15.0-1071.79UBUNTU-CVE-2024-42259
Ubuntu:24.04:LTSlinux-gcp6.8.0-1019.21USN-7154-1
Ubuntu:24.04:LTSlinux-gcp6.8.0-1019.21UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1019.21~22.04.1UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1019.21~22.04.1USN-7154-1
Ubuntu:22.04:LTSlinux-gke5.15.0-1069.75UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-gke5.15.0-1069.75USN-7100-1
Ubuntu:24.04:LTSlinux-gke6.8.0-1015.19USN-7154-1
Ubuntu:24.04:LTSlinux-gke6.8.0-1015.19UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1055.62UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1055.62USN-7100-1
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1002.4UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-50.51~22.04.1USN-7154-2
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-50.51~22.04.1UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-ibm5.15.0-1065.68USN-7100-1
Ubuntu:22.04:LTSlinux-ibm5.15.0-1065.68UBUNTU-CVE-2024-42259
Ubuntu:24.04:LTSlinux-ibm6.8.0-1017.17UBUNTU-CVE-2024-42259
Ubuntu:24.04:LTSlinux-ibm6.8.0-1017.17USN-7154-1
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1017.17~22.04.1UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1067.73USN-7144-1
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1067.73UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-kvm5.15.0-1069.74USN-7100-1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1069.74UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-125.135UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-125.135USN-7100-1
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-50.51.1UBUNTU-CVE-2024-42259
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-50.51.1USN-7154-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-50.51.1~22.04.1USN-7154-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-50.51.1~22.04.1UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1067.68USN-7100-1
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1067.68UBUNTU-CVE-2024-42259
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1019.21USN-7155-1
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1019.21UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1019.21~22.04.1UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1019.21~22.04.1USN-7155-1
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1019.21.1USN-7155-1
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1019.21.1UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1032.32UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1020.20UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2024-42259
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1018.18USN-7154-1
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1018.18UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-oracle5.15.0-1070.76UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-oracle5.15.0-1070.76USN-7100-1
Ubuntu:24.04:LTSlinux-oracle6.8.0-1017.18UBUNTU-CVE-2024-42259
Ubuntu:24.04:LTSlinux-oracle6.8.0-1017.18USN-7154-1
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1017.18~22.04.1UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1017.18~22.04.1USN-7154-1
Ubuntu:22.04:LTSlinux-raspi5.15.0-1065.68USN-7100-1
Ubuntu:22.04:LTSlinux-raspi5.15.0-1065.68UBUNTU-CVE-2024-42259
Ubuntu:24.04:LTSlinux-raspi6.8.0-1016.18UBUNTU-CVE-2024-42259
Ubuntu:24.04:LTSlinux-raspi6.8.0-1016.18USN-7154-1
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-42259
Ubuntu:24.04:LTSlinux-riscv6.8.0-50.51.1UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-50.51.1~22.04.1UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2024-42259
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1017.18UBUNTU-CVE-2024-42259
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1038.42USN-7100-1
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1038.42UBUNTU-CVE-2024-42259

Affected products (as reported)

VendorProductVersions
Linux Linux c58305af1835095ddc25ee6f548ac05915e66ac5 – before 3e06073d24807f04b4694108a8474decb7b99e60c58305af1835095ddc25ee6f548ac05915e66ac5 – before a256d019eaf044864c7e50312f0a65b323c24f39c58305af1835095ddc25ee6f548ac05915e66ac5 – before 50111a8098fb9ade621eeff82228a997d42732abc58305af1835095ddc25ee6f548ac05915e66ac5 – before 911f8055f175c82775d0fd8cedcd0b75413f4ba7c58305af1835095ddc25ee6f548ac05915e66ac5 – before e8a68aa842d3f8dd04a46b9d632e5f67fde1da9bc58305af1835095ddc25ee6f548ac05915e66ac5 – before 4b09513ce93b3dcb590baaaff2ce96f2d098312dc58305af1835095ddc25ee6f548ac05915e66ac5 – before ead9289a51ea82eb5b27029fcf4c34b2dd60cf06c58305af1835095ddc25ee6f548ac05915e66ac5 – before 8bdd9ef7e9b1b2a73e394712b72b22055e0e26c3
Linux Linux 4.9

References