CVE-2024-36019

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-36019
In the Linux kernel, the following vulnerability has been resolved: regmap: maple: Fix cache corruption in regcache_maple_drop() When keeping the upper end of a cache block entry, the entry[] array must be indexed by the offset from the base register of the block, i.e. max - mas.index. The code was indexing entry[] by only the register address, leading to an out-of-bounds access that copied some part of the kernel memory over the cache contents. This bug was not detected by the regmap KUnit test because it only tests with a block of registers starting at 0, so mas.index == 0.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/00bb549d7d63a21532e76e4a334d7807a54d9f31 Patch
https://git.kernel.org/stable/c/3af6c5ac72dc5b721058132a0a1d7779e443175e Patch
https://git.kernel.org/stable/c/51c4440b9d3fd7c8234e6de9170a487c03506e53 Patch
https://git.kernel.org/stable/c/00bb549d7d63a21532e76e4a334d7807a54d9f31 Patch
https://git.kernel.org/stable/c/3af6c5ac72dc5b721058132a0a1d7779e443175e Patch
https://git.kernel.org/stable/c/51c4440b9d3fd7c8234e6de9170a487c03506e53 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
History

18 Sep 2025, 15:54

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/00bb549d7d63a21532e76e4a334d7807a54d9f31 - () https://git.kernel.org/stable/c/00bb549d7d63a21532e76e4a334d7807a54d9f31 - Patch
References () https://git.kernel.org/stable/c/3af6c5ac72dc5b721058132a0a1d7779e443175e - () https://git.kernel.org/stable/c/3af6c5ac72dc5b721058132a0a1d7779e443175e - Patch
References () https://git.kernel.org/stable/c/51c4440b9d3fd7c8234e6de9170a487c03506e53 - () https://git.kernel.org/stable/c/51c4440b9d3fd7c8234e6de9170a487c03506e53 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1
CWE CWE-125

21 Nov 2024, 09:21

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/00bb549d7d63a21532e76e4a334d7807a54d9f31 - () https://git.kernel.org/stable/c/00bb549d7d63a21532e76e4a334d7807a54d9f31 -
References () https://git.kernel.org/stable/c/3af6c5ac72dc5b721058132a0a1d7779e443175e - () https://git.kernel.org/stable/c/3af6c5ac72dc5b721058132a0a1d7779e443175e -
References () https://git.kernel.org/stable/c/51c4440b9d3fd7c8234e6de9170a487c03506e53 - () https://git.kernel.org/stable/c/51c4440b9d3fd7c8234e6de9170a487c03506e53 -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: regmap: maple: corrige la corrupción de la caché en regcache_maple_drop() Cuando se mantiene el extremo superior de una entrada de bloque de caché, la matriz de entrada[] debe indexarse según el desplazamiento del registro base de el bloque, es decir, max - mas.index. El código indexaba la entrada [] solo por la dirección de registro, lo que generaba un acceso fuera de los límites que copiaba parte de la memoria del kernel sobre el contenido de la caché. Este error no fue detectado por la prueba regmap KUnit porque solo prueba con un bloque de registros que comienza en 0, por lo que mas.index == 0.

30 May 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-30 15:15

Updated : 2025-09-18 15:54

NVD link : CVE-2024-36019

Mitre link : CVE-2024-36019

CVE.ORG link : CVE-2024-36019

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-125

Out-of-bounds Read