In the Linux kernel, the following vulnerability has been resolved:
nouveau/dmem: handle kcalloc() allocation failure
The kcalloc() in nouveau_dmem_evict_chunk() will return null if the physical memory has run out. As a result, if we dereference src_pfns, dst_pfns or dma_addrs, the null pointer dereference bugs will happen.
Moreover, the GPU is going away. If the kcalloc() fails, we could not evict all pages mapping a chunk. So this patch adds a __GFP_NOFAIL flag in kcalloc().
Finally, as there is no need to have physically contiguous memory, this patch switches kcalloc() to kvcalloc() in order to avoid failing allocations.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 1, 2024 |
| Suse | — | Upgrade kernel-rt-develUpgrade kernel-azure-livepatch-develUpgrade kernel-azureUpgrade kernel-azure-develUpgrade kernel-rtUpgrade kernel-azure-optionalUpgrade dtb-xilinxUpgrade kernel-devel-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade kernel-rt-vdsoUpgrade dtb-armUpgrade dtb-exynosUpgrade kernel-rt-extraUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade kernel-debug-vdsoUpgrade kernel-default-extraUpgrade kernel-source-vanillaUpgrade kernel-obs-qaUpgrade kernel-sourceUpgrade reiserfs-kmp-azureUpgrade kernel-default-vdsoUpgrade dtb-apmUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-syms-azureUpgrade cluster-md-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade kernel-obs-buildUpgrade dtb-qcomUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade dtb-amlogicUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-lgUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-source-rtUpgrade kernel-default-livepatch-develUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-vdsoUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade dtb-renesasUpgrade dlm-kmp-rtUpgrade dtb-amazonUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade dtb-freescaleUpgrade dtb-amdUpgrade kernel-64kbUpgrade reiserfs-kmp-rtUpgrade dtb-socionextUpgrade kernel-rt_debug-develUpgrade dtb-marvellUpgrade kernel-debugUpgrade dtb-allwinnerUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-64kb-develUpgrade ocfs2-kmp-rtUpgrade kernel-debug-develUpgrade kernel-rt-optionalUpgrade kernel-azure-extraUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade dtb-broadcomUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-source-azureUpgrade dlm-kmp-azureUpgrade kernel-default-develUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-extra | Jun 13, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-oracle-64kUpgrade linux-image-gkeUpgrade linux-image-raspi | Jul 1, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub