{"id":"CVE-2024-42259","revision":"baddfeea23294e38898669d70d0a4e47","records":[{"revision":"baddfeea23294e38898669d70d0a4e47","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-42259","aliases":[],"title":"drm/i915/gem: Fix Virtual Memory mapping boundaries calculation","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/gem: Fix Virtual Memory mapping boundaries calculation\n\nCalculating the size of the mapped area as the lesser value\nbetween the requested size and the actual size does not consider\nthe partial mapping offset. This can cause page fault access.\n\nFix the calculation of the starting and ending addresses, the\ntotal size is now deduced from the difference between the end and\nstart addresses.\n\nAdditionally, the calculations have been rewritten in a clearer\nand more understandable form.\n\n[Joonas: Add Requires: tag]\nRequires: 60a2066c5005 (\"drm/i915/gem: Adjust vma offset for framebuffer mmap offset\")\n(cherry picked from commit 97b6784753da06d9d40232328efc5c5367e53417)","state":0,"publishedAt":"2024-08-14T14:50:49.844+00:00","modifiedAt":"2026-10-15T00:48:06.819+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/gpu/drm/i915/gem/i915_gem_mman.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"c58305af1835095ddc25ee6f548ac05915e66ac5\",\n                            \"lessThan\": \"3e06073d24807f04b4694108a8474decb7b99e60\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c58305af1835095ddc25ee6f548ac05915e66ac5\",\n                            \"lessThan\": \"a256d019eaf044864c7e50312f0a65b323c24f39\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c58305af1835095ddc25ee6f548ac05915e66ac5\",\n                            \"lessThan\": \"50111a8098fb9ade621eeff82228a997d42732ab\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c58305af1835095ddc25ee6f548ac05915e66ac5\",\n                            \"lessThan\": \"911f8055f175c82775d0fd8cedcd0b75413f4ba7\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c58305af1835095ddc25ee6f548ac05915e66ac5\",\n                            \"lessThan\": \"e8a68aa842d3f8dd04a46b9d632e5f67fde1da9b\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c58305af1835095ddc25ee6f548ac05915e66ac5\",\n                            \"lessThan\": \"4b09513ce93b3dcb590baaaff2ce96f2d098312d\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c58305af1835095ddc25ee6f548ac05915e66ac5\",\n                            \"lessThan\": \"ead9289a51ea82eb5b27029fcf4c34b2dd60cf06\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c58305af1835095ddc25ee6f548ac05915e66ac5\",\n                            \"lessThan\": \"8bdd9ef7e9b1b2a73e394712b72b22055e0e26c3\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/gpu/drm/i915/gem/i915_gem_mman.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4.9\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.9\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"4.19.320\",\n                            \"lessThanOrEqual\": \"4.19.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.282\",\n                            \"lessThanOrEqual\": \"5.4.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.224\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.165\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.106\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.46\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.10.5\",\n                            \"lessThanOrEqual\": \"6.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.11\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/3e06073d24807f04b4694108a8474decb7b99e60","https://git.kernel.org/stable/c/a256d019eaf044864c7e50312f0a65b323c24f39","https://git.kernel.org/stable/c/50111a8098fb9ade621eeff82228a997d42732ab","https://git.kernel.org/stable/c/911f8055f175c82775d0fd8cedcd0b75413f4ba7","https://git.kernel.org/stable/c/e8a68aa842d3f8dd04a46b9d632e5f67fde1da9b","https://git.kernel.org/stable/c/4b09513ce93b3dcb590baaaff2ce96f2d098312d","https://git.kernel.org/stable/c/ead9289a51ea82eb5b27029fcf4c34b2dd60cf06","https://git.kernel.org/stable/c/8bdd9ef7e9b1b2a73e394712b72b22055e0e26c3","https://project-zero.issues.chromium.org/issues/42451707"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-42259","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-42259","identifiers":["CVE-2024-42259"]},"retained":false,"historicalAffected":[]}],"coverage":[]}