CVE-2024-26943

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-26943
In the Linux kernel, the following vulnerability has been resolved: nouveau/dmem: handle kcalloc() allocation failure The kcalloc() in nouveau_dmem_evict_chunk() will return null if the physical memory has run out. As a result, if we dereference src_pfns, dst_pfns or dma_addrs, the null pointer dereference bugs will happen. Moreover, the GPU is going away. If the kcalloc() fails, we could not evict all pages mapping a chunk. So this patch adds a __GFP_NOFAIL flag in kcalloc(). Finally, as there is no need to have physically contiguous memory, this patch switches kcalloc() to kvcalloc() in order to avoid failing allocations.

5.5 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/16e87fe23d4af6df920406494ced5c0f4354567b Patch Mailing List
https://git.kernel.org/stable/c/16e87fe23d4af6df920406494ced5c0f4354567b Patch Mailing List
https://git.kernel.org/stable/c/2a84744a037b8a511d6a9055f3defddc28ff4a4d Patch Mailing List
https://git.kernel.org/stable/c/2a84744a037b8a511d6a9055f3defddc28ff4a4d Patch Mailing List
https://git.kernel.org/stable/c/3e82f7383e0b82a835e6b6b06a348b2bc4e2c2ee Patch Mailing List
https://git.kernel.org/stable/c/3e82f7383e0b82a835e6b6b06a348b2bc4e2c2ee Patch Mailing List
https://git.kernel.org/stable/c/5e81773757a95fc298e96cfd6d4700f07b6192a2 Patch Mailing List
https://git.kernel.org/stable/c/5e81773757a95fc298e96cfd6d4700f07b6192a2 Patch Mailing List
https://git.kernel.org/stable/c/9acfd8b083a0ffbd387566800d89f55058a68af2 Patch Mailing List
https://git.kernel.org/stable/c/9acfd8b083a0ffbd387566800d89f55058a68af2 Patch Mailing List
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

03 Mar 2025, 17:47

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/3e82f7383e0b82a835e6b6b06a348b2bc4e2c2ee - () https://git.kernel.org/stable/c/3e82f7383e0b82a835e6b6b06a348b2bc4e2c2ee - Patch, Mailing List
References () https://git.kernel.org/stable/c/5e81773757a95fc298e96cfd6d4700f07b6192a2 - () https://git.kernel.org/stable/c/5e81773757a95fc298e96cfd6d4700f07b6192a2 - Patch, Mailing List
References () https://git.kernel.org/stable/c/9acfd8b083a0ffbd387566800d89f55058a68af2 - () https://git.kernel.org/stable/c/9acfd8b083a0ffbd387566800d89f55058a68af2 - Patch, Mailing List
References () https://git.kernel.org/stable/c/16e87fe23d4af6df920406494ced5c0f4354567b - () https://git.kernel.org/stable/c/16e87fe23d4af6df920406494ced5c0f4354567b - Patch, Mailing List
References () https://git.kernel.org/stable/c/2a84744a037b8a511d6a9055f3defddc28ff4a4d - () https://git.kernel.org/stable/c/2a84744a037b8a511d6a9055f3defddc28ff4a4d - Patch, Mailing List

01 May 2024, 06:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-01 06:15

Updated : 2025-03-03 17:47

NVD link : CVE-2024-26943

Mitre link : CVE-2024-26943

JSON object : View

Products Affected

linux

  • linux_kernel
CWE

No CWE.