CVE-2024-36019

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the regcache maple drop() function in the Linux kernel's regmap module, specifically in the drivers/base/regmap/regcache-maple.c file. It involves an out-of-bounds access that copies part of the kernel memory over the cache contents. This occurs because the code indexes the entry[] array by only the register address, instead of using the offset from the base register of the block, i.e., max - mas.index. The bug was not detected by the regmap KUnit test because it only tests with a block of registers starting at 0, resulting in mas.index == 0.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.