CVE-2024-36018

A flaw was found in the Linux kernel's Nouveau driver. This flaw allows a local user to cause a Denial of Service (DoS) through memory corruption. An error in calculating address ranges during virtual memory remapping operations can corrupt internal page tables and crash the operating system.

This vulnerability is rated as Low severity because exploitation requires local access to interact directly with Nouveau graphics hardware, limiting the impact to a denial of service without compromising system confidentiality or elevating privileges. Typical enterprise Red Hat environments operate in headless server configurations without active open-source NVIDIA drivers loaded, significantly minimizing practical exposure. Furthermore, the affected virtual memory management functionality was introduced in newer upstream kernels and is absent from supported Red Hat Enterprise Linux releases.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.