Security readout for executives and security teams
Plain-English summary
A flaw in Linux’s Nouveau graphics driver can corrupt memory-management page tables during certain GPU remapping operations, causing a kernel crash and potentially affecting confidentiality, integrity, and availability. Exploitation requires local, low-privileged access; the supplied evidence does not show a remote attack path.
Executive priority
Schedule prompt remediation for exposed GPU workstations, shared Linux hosts, and systems running untrusted workloads. Internet-facing status alone does not determine risk because exploitation is local. Use normal expedited patch testing rather than emergency incident response unless related crashes or suspicious local activity are observed.
Technical view
Nouveau UVMM calculated previous-address and unmap ranges incorrectly during remap operations. An oversized or misplaced unmap could corrupt GPU page tables and trigger a kernel oops. CVSS 3.1 rates it 7.8: local access, low complexity, low privileges, no user interaction, and high potential impact.
Likely exposure
Exposure is most likely on Linux systems running an affected kernel with the Nouveau driver in use. A local process must reach the vulnerable GPU remapping behavior. The bundle identifies affected releases but does not provide sufficiently clear package-level ranges for every distribution.
Exploitation context
CISA KEV status is false in the supplied bundle, and no cited source establishes active exploitation. The documented trigger came from a graphics conformance test. Treat this as a credible local privilege and stability risk, without claiming observed attacks.
Researcher notes
The core defect is arithmetic around remap start/end boundaries, producing an incorrect unmap address or length. The supplied description confirms page-table corruption and a kernel oops. It does not document a public exploit, proven privilege escalation, reliable information disclosure, or distribution-specific fixed package versions.
Mitigation direction
- Consult distribution advisories to map installed kernel packages to the referenced stable fixes.
- Upgrade to a vendor-supported kernel containing the appropriate Nouveau UVMM correction.
- Prioritize systems using Nouveau for GPU workloads or permitting untrusted local users.
- Reboot updated systems and confirm the corrected kernel is running.
Validation and detection
- Inventory running kernel versions and distribution package builds across Linux systems.
- Determine which systems have the Nouveau kernel module loaded or actively used.
- Compare vendor kernel changelogs against the referenced Linux stable commits.
- Review kernel logs for Nouveau-related oopses, page-table corruption, or GPU remap failures.
- After remediation, verify the expected kernel build is active.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2024-36018 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- High
- CVSS
- 7.8 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H1.85.9LinuxVulnerability scoring details
Base CVSS 3.1 score
7.8HighVector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/692a51bebf4552bdf0a79ccd68d291182a26a569CVE reference, Linux
- https://git.kernel.org/stable/c/0c16020d2b69a602c8ae6a1dd2aac9a3023249d6CVE reference, Linux
- https://git.kernel.org/stable/c/be141849ec00ef39935bf169c0f194ac70bf85ceCVE reference, Linux
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.