In the Linux kernel, the following vulnerability has been resolved:
nouveau/firmware: use dma non-coherent allocator
Currently, enabling SG_DEBUG in the kernel will cause nouveau to hit a BUG() on startup, when the iommu is enabled:
kernel BUG at include/linux/scatterlist.h:187! invalid opcode: 0000 [#1] PREEMPT SMP NOPTI CPU: 7 PID: 930 Comm: (udev-worker) Not tainted 6.9.0-rc3Lyude-Test+ #30 Hardware name: MSI MS-7A39/A320M GAMING PRO (MS-7A39), BIOS 1.I0 01/22/2019 RIP: 0010:sg_init_one+0x85/0xa0 Code: 69 88 32 01 83 e1 03 f6 c3 03 75 20 a8 01 75 1e 48 09 cb 41 89 54 24 08 49 89 1c 24 41 89 6c 24 0c 5b 5d 41 5c e9 7b b9 88 00 <0f> 0b 0f 0b 0f 0b 48 8b 05 5e 46 9a 01 eb b2 66 66 2e 0f 1f 84 00 RSP: 0018:ffffa776017bf6a0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffffa77600d87000 RCX: 000000000000002b RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffa77680d87000 RBP: 000000000000e000 R08: 0000000000000000 R09: 0000000000000000 R10: ffff98f4c46aa508 R11: 0000000000000000 R12: ffff98f4c46aa508 R13: ffff98f4c46aa008 R14: ffffa77600d4a000 R15: ffffa77600d4a018 FS: 00007feeb5aae980(0000) GS:ffff98f5c4dc0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f22cb9a4520 CR3: 00000001043ba000 CR4: 00000000003506f0 Call Trace: <TASK> ? die+0x36/0x90 ? do_trap+0xdd/0x100 ? sg_init_one+0x85/0xa0 ? do_error_trap+0x65/0x80 ? sg_init_one+0x85/0xa0 ? exc_invalid_op+0x50/0x70 ? sg_init_one+0x85/0xa0 ? asm_exc_invalid_op+0x1a/0x20 ? sg_init_one+0x85/0xa0 nvkm_firmware_ctor+0x14a/0x250 [nouveau] nvkm_falcon_fw_ctor+0x42/0x70 [nouveau] ga102_gsp_booter_ctor+0xb4/0x1a0 [nouveau] r535_gsp_oneinit+0xb3/0x15f0 [nouveau] ? srso_return_thunk+0x5/0x5f ? srso_return_thunk+0x5/0x5f ? nvkm_udevice_new+0x95/0x140 [nouveau] ? srso_return_thunk+0x5/0x5f ? srso_return_thunk+0x5/0x5f ? ktime_get+0x47/0xb0
Fix this by using the non-coherent allocator instead, I think there might be a better answer to this, but it involve ripping up some of APIs using sg lists.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 11, 2024 |
| Suse | — | Upgrade ocfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-debug-develUpgrade kernel-default-livepatchUpgrade kernel-rt_debugUpgrade kernel-zfcpdumpUpgrade dtb-alteraUpgrade dtb-socionextUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-symsUpgrade kernel-source-vanillaUpgrade kernel-64kb-optionalUpgrade dtb-renesasUpgrade kernel-docs-htmlUpgrade kernel-devel-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-caviumUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade kselftests-kmp-azureUpgrade kernel-default-extraUpgrade kernel-syms-azureUpgrade dtb-apmUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-freescaleUpgrade gfs2-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-rt-vdsoUpgrade kernel-source-azureUpgrade dtb-allwinnerUpgrade kernel-default-develUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-debugUpgrade ocfs2-kmp-azureUpgrade dtb-amazonUpgrade kernel-azure-extraUpgrade dlm-kmp-64kbUpgrade kernel-rt-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-macrosUpgrade ocfs2-kmp-rtUpgrade kernel-source-rtUpgrade dtb-amdUpgrade dtb-appleUpgrade gfs2-kmp-rtUpgrade dtb-marvellUpgrade dtb-rockchipUpgrade kernel-azure-vdsoUpgrade dtb-mediatekUpgrade kernel-syms-rtUpgrade reiserfs-kmp-rtUpgrade kernel-azure-develUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade kernel-rt-livepatch-develUpgrade kernel-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-devel-rtUpgrade dtb-qcomUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-debug-livepatch-develUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade kselftests-kmp-rtUpgrade dtb-amlogicUpgrade kernel-azureUpgrade kernel-rt-extraUpgrade dtb-sprdUpgrade kernel-64kb-develUpgrade dlm-kmp-defaultUpgrade kernel-rtUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade dtb-armUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade kernel-64kb-extraUpgrade dlm-kmp-azure | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeopUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-oem-24.04aUpgrade linux-image-gcpUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-azureUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-oem-22.04Upgrade linux-image-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-ibmUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1017-oracle | Dec 13, 2024 | Sep 11, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub