In the Linux kernel, the following vulnerability has been resolved:
nouveau/firmware: use dma non-coherent allocator
Currently, enabling SG_DEBUG in the kernel will cause nouveau to hit a BUG() on startup, when the iommu is enabled:
kernel BUG at include/linux/scatterlist.h:187! invalid opcode: 0000 [#1] PREEMPT SMP NOPTI CPU: 7 PID: 930 Comm: (udev-worker) Not tainted 6.9.0-rc3Lyude-Test+ #30 Hardware name: MSI MS-7A39/A320M GAMING PRO (MS-7A39), BIOS 1.I0 01/22/2019 RIP: 0010:sg_init_one+0x85/0xa0 Code: 69 88 32 01 83 e1 03 f6 c3 03 75 20 a8 01 75 1e 48 09 cb 41 89 54 24 08 49 89 1c 24 41 89 6c 24 0c 5b 5d 41 5c e9 7b b9 88 00 <0f> 0b 0f 0b 0f 0b 48 8b 05 5e 46 9a 01 eb b2 66 66 2e 0f 1f 84 00 RSP: 0018:ffffa776017bf6a0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffffa77600d87000 RCX: 000000000000002b RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffa77680d87000 RBP: 000000000000e000 R08: 0000000000000000 R09: 0000000000000000 R10: ffff98f4c46aa508 R11: 0000000000000000 R12: ffff98f4c46aa508 R13: ffff98f4c46aa008 R14: ffffa77600d4a000 R15: ffffa77600d4a018 FS: 00007feeb5aae980(0000) GS:ffff98f5c4dc0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f22cb9a4520 CR3: 00000001043ba000 CR4: 00000000003506f0 Call Trace: <TASK> ? die+0x36/0x90 ? do_trap+0xdd/0x100 ? sg_init_one+0x85/0xa0 ? do_error_trap+0x65/0x80 ? sg_init_one+0x85/0xa0 ? exc_invalid_op+0x50/0x70 ? sg_init_one+0x85/0xa0 ? asm_exc_invalid_op+0x1a/0x20 ? sg_init_one+0x85/0xa0 nvkm_firmware_ctor+0x14a/0x250 [nouveau] nvkm_falcon_fw_ctor+0x42/0x70 [nouveau] ga102_gsp_booter_ctor+0xb4/0x1a0 [nouveau] r535_gsp_oneinit+0xb3/0x15f0 [nouveau] ? srso_return_thunk+0x5/0x5f ? srso_return_thunk+0x5/0x5f ? nvkm_udevice_new+0x95/0x140 [nouveau] ? srso_return_thunk+0x5/0x5f ? srso_return_thunk+0x5/0x5f ? ktime_get+0x47/0xb0
Fix this by using the non-coherent allocator instead, I think there might be a better answer to this, but it involve ripping up some of APIs using sg lists.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 11, 2024 |
| Suse | — | Upgrade kernel-default-extraUpgrade reiserfs-kmp-64kbUpgrade dtb-hisiliconUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dtb-lgUpgrade kernel-default-vdsoUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade dtb-exynosUpgrade kernel-rt-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-debug-develUpgrade dtb-freescaleUpgrade kernel-rt_debug-develUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade dtb-renesasUpgrade ocfs2-kmp-rtUpgrade kernel-source-vanillaUpgrade dtb-allwinnerUpgrade dtb-socionextUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade dtb-apmUpgrade kernel-devel-azureUpgrade kernel-source-rtUpgrade kernel-default-livepatchUpgrade kernel-rt_debugUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade dtb-amdUpgrade dtb-broadcomUpgrade dtb-appleUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade kernel-macrosUpgrade kernel-rt-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade ocfs2-kmp-64kbUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade dtb-amazonUpgrade kernel-64kbUpgrade kernel-debugUpgrade kernel-default-develUpgrade kernel-obs-qaUpgrade kselftests-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-docsUpgrade kernel-rt_debug-vdsoUpgrade dtb-rockchipUpgrade kernel-azureUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-qcomUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade dlm-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-default-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-default-baseUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-sprd | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04bUpgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-virtualUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-ibm | Dec 13, 2024 | Sep 11, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub