vulnerability

Red Hat: CVE-2024-36019: kernel: regmap: maple: Fix cache corruption in regcache_maple_drop() (Multiple Advisories)

Severity
5
CVSS
(AV:L/AC:L/Au:M/C:P/I:N/A:C)
Published
May 30, 2024
Added
Dec 5, 2024
Modified
Sep 19, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

regmap: maple: Fix cache corruption in regcache_maple_drop()

When keeping the upper end of a cache block entry, the entry[] array
must be indexed by the offset from the base register of the block,
i.e. max - mas.index.

The code was indexing entry[] by only the register address, leading
to an out-of-bounds access that copied some part of the kernel
memory over the cache contents.

This bug was not detected by the regmap KUnit test because it only
tests with a block of registers starting at 0, so mas.index == 0.

Solutions

no-fix-redhat-rpm-packageredhat-upgrade-kernelredhat-upgrade-kernel-rt
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.