In the Linux kernel, the following vulnerability has been resolved:
riscv: Fix loading 64-bit NOMMU kernels past the start of RAM
commit 3335068f8721 ("riscv: Use PUD/P4D/PGD pages for the linear mapping") added logic to allow using RAM below the kernel load address. However, this does not work for NOMMU, where PAGE_OFFSET is fixed to the kernel load address. Since that range of memory corresponds to PFNs below ARCH_PFN_OFFSET, mm initialization runs off the beginning of mem_map and corrupts adjacent kernel memory. Fix this by restoring the previous behavior for NOMMU kernels.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-genericUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fdeUpgrade linux-image-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1010-oem | Aug 9, 2024 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub