CVE-2024-36018

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2024-36018", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-17T13:50:33.155Z", "datePublished": "2024-05-30T14:59:42.091Z", "dateUpdated": "2026-08-05T11:31:38.174Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T11:31:38.174Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnouveau/uvmm: fix addr/range calcs for remap operations\n\ndEQP-VK.sparse_resources.image_rebind.2d_array.r64i.128_128_8\nwas causing a remap operation like the below.\n\nop_remap: prev: 0000003fffed0000 00000000000f0000 00000000a5abd18a 0000000000000000\nop_remap: next:\nop_remap: unmap: 0000003fffed0000 0000000000100000 0\nop_map: map: 0000003ffffc0000 0000000000010000 000000005b1ba33c 00000000000e0000\n\nThis was resulting in an unmap operation from 0x3fffed0000+0xf0000, 0x100000\nwhich was corrupting the pagetables and oopsing the kernel.\n\nFixes the prev + unmap range calcs to use start/end and map back to addr/range."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}, "scenarios": [{"lang": "en", "value": "AV:L - Triggered through the DRM_IOCTL_NOUVEAU_VM_BIND ioctl on a nouveau DRM device node; no network or remote reachability is involved.\nAC:L - The attacker fully controls the VA layout that produces a prev-only remap (map a range, then map over its tail), making the overshoot amount and target address deterministic; it reproduces from a stock Vulkan CTS test with no race or unknown state.\nPR:L - The ioctl is registered DRM_RENDER_ALLOW, so it works on an unauthenticated render node (/dev/dri/renderD*), which unprivileged desktop users hold via logind ACLs or the render group and which is routinely exposed to containers and GPU sandboxes.\nUI:N - The attacking process performs VM_INIT and VM_BIND entirely on its own file descriptor; no victim action or interaction is required.\nS:U - The corrupted GPU page tables and the resulting memory access are managed by the same kernel security authority; there is no VM, IOMMU, or hypervisor boundary crossed.\nC:H - Because the over-long unmap is silently dropped with -EINVAL when it crosses the managed-range boundary while cleanup still drops the BO reference, the GPU retains valid mappings on freed pages that get recycled to other processes and the kernel, giving the attacker's shaders an arbitrary read primitive.\nI:H - The bug performs an attacker-sized, attacker-placed PTE clear outside the intended range, corrupting live GPU page-table entries behind drm_gpuvm's bookkeeping, and the stale-mapping case leaves writable GPU DMA access to reallocated kernel memory.\nA:H - The reported symptom is a kernel oops \u2014 nvkm_vmm_iter() omits the NVKM_VMM_PDE_INVALID check on the unmap path, so walking into an unbacked or sparse PDE dereferences NULL or ERR_PTR(-EBUSY), and an unprivileged process can trigger it at will."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/nouveau/nouveau_uvmm.c"], "versions": [{"version": "b88baab828713ce0b49b185444b2ee83bed373a8", "lessThan": "692a51bebf4552bdf0a79ccd68d291182a26a569", "status": "affected", "versionType": "git"}, {"version": "b88baab828713ce0b49b185444b2ee83bed373a8", "lessThan": "0c16020d2b69a602c8ae6a1dd2aac9a3023249d6", "status": "affected", "versionType": "git"}, {"version": "b88baab828713ce0b49b185444b2ee83bed373a8", "lessThan": "be141849ec00ef39935bf169c0f194ac70bf85ce", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/nouveau/nouveau_uvmm.c"], "versions": [{"version": "6.6", "status": "affected"}, {"version": "0", "lessThan": "6.6", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.26", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.8.5", "lessThanOrEqual": "6.8.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.9", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6", "versionEndExcluding": "6.6.26"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6", "versionEndExcluding": "6.8.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6", "versionEndExcluding": "6.9"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/692a51bebf4552bdf0a79ccd68d291182a26a569"}, {"url": "https://git.kernel.org/stable/c/0c16020d2b69a602c8ae6a1dd2aac9a3023249d6"}, {"url": "https://git.kernel.org/stable/c/be141849ec00ef39935bf169c0f194ac70bf85ce"}], "title": "nouveau/uvmm: fix addr/range calcs for remap operations", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-06-06T18:34:51.763969Z", "id": "CVE-2024-36018", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-06T18:35:02.091Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T03:30:12.600Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/692a51bebf4552bdf0a79ccd68d291182a26a569", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/0c16020d2b69a602c8ae6a1dd2aac9a3023249d6", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/be141849ec00ef39935bf169c0f194ac70bf85ce", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/692a51bebf4552bdf0a79ccd68d291182a26a569", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/0c16020d2b69a602c8ae6a1dd2aac9a3023249d6", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/be141849ec00ef39935bf169c0f194ac70bf85ce", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T03:30:12.600Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-36018", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-06T18:34:51.763969Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-06T18:34:57.767Z"}}], "cna": {"title": "nouveau/uvmm: fix addr/range calcs for remap operations", "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "scenarios": [{"lang": "en", "value": "AV:L - Triggered through the DRM_IOCTL_NOUVEAU_VM_BIND ioctl on a nouveau DRM device node; no network or remote reachability is involved.\nAC:L - The attacker fully controls the VA layout that produces a prev-only remap (map a range, then map over its tail), making the overshoot amount and target address deterministic; it reproduces from a stock Vulkan CTS test with no race or unknown state.\nPR:L - The ioctl is registered DRM_RENDER_ALLOW, so it works on an unauthenticated render node (/dev/dri/renderD*), which unprivileged desktop users hold via logind ACLs or the render group and which is routinely exposed to containers and GPU sandboxes.\nUI:N - The attacking process performs VM_INIT and VM_BIND entirely on its own file descriptor; no victim action or interaction is required.\nS:U - The corrupted GPU page tables and the resulting memory access are managed by the same kernel security authority; there is no VM, IOMMU, or hypervisor boundary crossed.\nC:H - Because the over-long unmap is silently dropped with -EINVAL when it crosses the managed-range boundary while cleanup still drops the BO reference, the GPU retains valid mappings on freed pages that get recycled to other processes and the kernel, giving the attacker's shaders an arbitrary read primitive.\nI:H - The bug performs an attacker-sized, attacker-placed PTE clear outside the intended range, corrupting live GPU page-table entries behind drm_gpuvm's bookkeeping, and the stale-mapping case leaves writable GPU DMA access to reallocated kernel memory.\nA:H - The reported symptom is a kernel oops \u2014 nvkm_vmm_iter() omits the NVKM_VMM_PDE_INVALID check on the unmap path, so walking into an unbacked or sparse PDE dereferences NULL or ERR_PTR(-EBUSY), and an unprivileged process can trigger it at will."}]}], "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "b88baab828713ce0b49b185444b2ee83bed373a8", "lessThan": "692a51bebf4552bdf0a79ccd68d291182a26a569", "versionType": "git"}, {"status": "affected", "version": "b88baab828713ce0b49b185444b2ee83bed373a8", "lessThan": "0c16020d2b69a602c8ae6a1dd2aac9a3023249d6", "versionType": "git"}, {"status": "affected", "version": "b88baab828713ce0b49b185444b2ee83bed373a8", "lessThan": "be141849ec00ef39935bf169c0f194ac70bf85ce", "versionType": "git"}], "programFiles": ["drivers/gpu/drm/nouveau/nouveau_uvmm.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.6"}, {"status": "unaffected", "version": "0", "lessThan": "6.6", "versionType": "semver"}, {"status": "unaffected", "version": "6.6.26", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.8.5", "versionType": "semver", "lessThanOrEqual": "6.8.*"}, {"status": "unaffected", "version": "6.9", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/gpu/drm/nouveau/nouveau_uvmm.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/692a51bebf4552bdf0a79ccd68d291182a26a569"}, {"url": "https://git.kernel.org/stable/c/0c16020d2b69a602c8ae6a1dd2aac9a3023249d6"}, {"url": "https://git.kernel.org/stable/c/be141849ec00ef39935bf169c0f194ac70bf85ce"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnouveau/uvmm: fix addr/range calcs for remap operations\n\ndEQP-VK.sparse_resources.image_rebind.2d_array.r64i.128_128_8\nwas causing a remap operation like the below.\n\nop_remap: prev: 0000003fffed0000 00000000000f0000 00000000a5abd18a 0000000000000000\nop_remap: next:\nop_remap: unmap: 0000003fffed0000 0000000000100000 0\nop_map: map: 0000003ffffc0000 0000000000010000 000000005b1ba33c 00000000000e0000\n\nThis was resulting in an unmap operation from 0x3fffed0000+0xf0000, 0x100000\nwhich was corrupting the pagetables and oopsing the kernel.\n\nFixes the prev + unmap range calcs to use start/end and map back to addr/range."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.6.26", "versionStartIncluding": "6.6"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.8.5", "versionStartIncluding": "6.6"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.9", "versionStartIncluding": "6.6"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T11:31:38.174Z"}}}, "cveMetadata": {"cveId": "CVE-2024-36018", "state": "PUBLISHED", "dateUpdated": "2026-08-05T11:31:38.174Z", "dateReserved": "2024-05-17T13:50:33.155Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-30T14:59:42.091Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/gpu/drm/nouveau/nouveau_uvmm.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "692a51bebf4552bdf0a79ccd68d291182a26a569", "status": "affected", "version": "b88baab828713ce0b49b185444b2ee83bed373a8", "versionType": "git"}, {"lessThan": "0c16020d2b69a602c8ae6a1dd2aac9a3023249d6", "status": "affected", "version": "b88baab828713ce0b49b185444b2ee83bed373a8", "versionType": "git"}, {"lessThan": "be141849ec00ef39935bf169c0f194ac70bf85ce", "status": "affected", "version": "b88baab828713ce0b49b185444b2ee83bed373a8", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/gpu/drm/nouveau/nouveau_uvmm.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.6"}, {"lessThan": "6.6", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.26", "versionType": "semver"}, {"lessThanOrEqual": "6.8.*", "status": "unaffected", "version": "6.8.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "6.9", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "820B6E76-73EC-4D11-9B47-9B84788379A9", "versionEndExcluding": "6.6.26", "versionStartIncluding": "6.6", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "DBD6C99E-4250-4DFE-8447-FF2075939D10", "versionEndExcluding": "6.8.5", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*", "matchCriteriaId": "22BEDD49-2C6D-402D-9DBF-6646F6ECD10B", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*", "matchCriteriaId": "DF73CB2A-DFFD-46FB-9BFE-AA394F27EA37", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnouveau/uvmm: fix addr/range calcs for remap operations\n\ndEQP-VK.sparse_resources.image_rebind.2d_array.r64i.128_128_8\nwas causing a remap operation like the below.\n\nop_remap: prev: 0000003fffed0000 00000000000f0000 00000000a5abd18a 0000000000000000\nop_remap: next:\nop_remap: unmap: 0000003fffed0000 0000000000100000 0\nop_map: map: 0000003ffffc0000 0000000000010000 000000005b1ba33c 00000000000e0000\n\nThis was resulting in an unmap operation from 0x3fffed0000+0xf0000, 0x100000\nwhich was corrupting the pagetables and oopsing the kernel.\n\nFixes the prev + unmap range calcs to use start/end and map back to addr/range."}, {"lang": "es", "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: nouveau/uvmm: corrige los c\u00e1lculos de addr/range para operaciones de reasignaci\u00f3n dEQP-VK.sparse_resources.image_rebind.2d_array.r64i.128_128_8 estaba provocando una operaci\u00f3n de reasignaci\u00f3n como la siguiente. OP_REMAP: Prev: 0000003FFED0000 00000000000F0000 0000000000A5ABD18A 0000000000000000 OP_REMAP: SIGUIEN 0000000000000E0000 Esto dio como resultado una operaci\u00f3n de UNMAP desde 0x3fffed0000+0xf0000, 0x100000, que corromp\u00eda los pagetables y se agotaba el n\u00facleo. Corrige los c\u00e1lculos de rango anterior + desasignar para usar inicio/fin y volver a asignar a direcci\u00f3n/rango."}], "id": "CVE-2024-36018", "lastModified": "2026-08-04T11:18:23.230", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-36018", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2024-06-06T18:34:51.763969Z", "version": "2.0.3"}}]}, "published": "2024-05-30T15:15:48.950", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/0c16020d2b69a602c8ae6a1dd2aac9a3023249d6"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/692a51bebf4552bdf0a79ccd68d291182a26a569"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/be141849ec00ef39935bf169c0f194ac70bf85ce"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/0c16020d2b69a602c8ae6a1dd2aac9a3023249d6"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/692a51bebf4552bdf0a79ccd68d291182a26a569"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/be141849ec00ef39935bf169c0f194ac70bf85ce"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: nouveau/uvmm: fix addr/range calcs for remap operations", "id": "2284404", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2284404"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.7", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H", "status": "draft"}, "cwe": "CWE-119", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nnouveau/uvmm: fix addr/range calcs for remap operations\ndEQP-VK.sparse_resources.image_rebind.2d_array.r64i.128_128_8\nwas causing a remap operation like the below.\nop_remap: prev: 0000003fffed0000 00000000000f0000 00000000a5abd18a 0000000000000000\nop_remap: next:\nop_remap: unmap: 0000003fffed0000 0000000000100000 0\nop_map: map: 0000003ffffc0000 0000000000010000 000000005b1ba33c 00000000000e0000\nThis was resulting in an unmap operation from 0x3fffed0000+0xf0000, 0x100000\nwhich was corrupting the pagetables and oopsing the kernel.\nFixes the prev + unmap range calcs to use start/end and map back to addr/range."], "name": "CVE-2024-36018", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-05-30T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-36018\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-36018\nhttps://lore.kernel.org/linux-cve-announce/2024053040-CVE-2024-36018-d6b8@gregkh/T"], "threat_severity": "Low"}

{"created": "2025-07-13T11:31:58.119801+00:00", "updated": "2025-07-13T11:31:58.119854+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}