Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-42259— drm/i915/gem: Fix Virtual Memory mapping boundaries calculation

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于虚拟内存映射边界计算存在问题，可能会导致页面错误访问。

CVSS 7.8 · High EPSS 0.27% · P17

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux c58305af1835095ddc25ee6f548ac05915e66ac5< 3e06073d24807f04b4694108a8474decb7b99e60 affected
c58305af1835095ddc25ee6f548ac05915e66ac5< a256d019eaf044864c7e50312f0a65b323c24f39 affected
c58305af1835095ddc25ee6f548ac05915e66ac5< 50111a8098fb9ade621eeff82228a997d42732ab affected
c58305af1835095ddc25ee6f548ac05915e66ac5< 911f8055f175c82775d0fd8cedcd0b75413f4ba7 affected
c58305af1835095ddc25ee6f548ac05915e66ac5< e8a68aa842d3f8dd04a46b9d632e5f67fde1da9b affected
c58305af1835095ddc25ee6f548ac05915e66ac5< 4b09513ce93b3dcb590baaaff2ce96f2d098312d affected
c58305af1835095ddc25ee6f548ac05915e66ac5< ead9289a51ea82eb5b27029fcf4c34b2dd60cf06 affected
c58305af1835095ddc25ee6f548ac05915e66ac5< 8bdd9ef7e9b1b2a73e394712b72b22055e0e26c3 affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-42259

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix Virtual Memory mapping boundaries calculation Calculating the size of the mapped area as the lesser value between the requested size and the actual size does not consider the partial mapping offset. This can cause page fault access. Fix the calculation of the starting and ending addresses, the total size is now deduced from the difference between the end and start addresses. Additionally, the calculations have been rewritten in a clearer and more understandable form. [Joonas: Add Requires: tag] Requires: 60a2066c5005 ("drm/i915/gem: Adjust vma offset for framebuffer mmap offset") (cherry picked from commit 97b6784753da06d9d40232328efc5c5367e53417)
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于虚拟内存映射边界计算存在问题，可能会导致页面错误访问。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux c58305af1835095ddc25ee6f548ac05915e66ac5 ~ 3e06073d24807f04b4694108a8474decb7b99e60 -
Linux Linux 4.9 -

II. Public POCs for CVE-2024-42259

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-42259

请登录查看更多情报信息。

News Coverage for CVE-2024-42259 (1)

Other References for CVE-2024-42259 (8)

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2024-42259

No comments yet

Leave a comment