CVE-2024-36965: linux
Vulnerability summary
CVE-2024-36965 is a high (CVSS 7.8) vulnerability in linux. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 11.8% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 22 · Related 20Timeline
- 08-06-2024PublishedVulnerability first disclosed.
- 05-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: remoteproc: mediatek: Make sure IPI buffer fits in L2TCM The IPI buffer location is read from the firmware that we load to the System Companion Processor, and it's not granted that both the SRAM (L2TCM) size that is defined in the devicetree node is large enough for that, and while this is especially true for multi-core SCP, it's still useful to check on single-core variants as well. Failing to perform this check may make this driver perform R/W operations out of the L2TCM boundary, resulting (at best) in a kernel panic. To fix that, check that the IPI buffer fits, otherwise return a failure and refuse to boot the relevant SCP core (or the SCP at all, if this is single core).
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HDiffers
- NVDNIST5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HDiffers
EPSS trend
Probability
0.22%
Chance of exploitation in the next 30 days
Percentile
12%
Versus all other CVEs
30-day change
0.00 pp
From 0.22% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu116 products
- linux< 5.15.0-118.128 | < 6.8.0-40.40
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.15.0-1067.73 | < 6.8.0-1013.14
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 3efa0ea743b77d1611501f7d8b4f320d032d73ae, < 00548ac6b14428719c970ef90adae2b3b48c0cdf | ≥ 3efa0ea743b77d1611501f7d8b4f320d032d73ae, < 1d9e2de24533daca36cbf09e8d8596bf72b526b2 | ≥ 3efa0ea743b77d1611501f7d8b4f320d032d73ae, < 26c6d7dc8c6a9fde9d362ab2eef6390efeff145e | ≥ 3efa0ea743b77d1611501f7d8b4f320d032d73ae, < 838b49e211d59fa827ff9df062d4020917cffbdf | ≥ 3efa0ea743b77d1611501f7d8b4f320d032d73ae, < 36c79eb4845551e9f6d28c663b38ce0ab03b84a9 | ≥ 3efa0ea743b77d1611501f7d8b4f320d032d73ae, < 331f91d86f71d0bb89a44217cc0b2a22810bbd42 | 5.11
- linux_kernel≥ 5.11, ≤ 5.15.160 | ≥ 5.16, ≤ 6.1.92 | ≥ 6.2, ≤ 6.6.32 | ≥ 6.7, ≤ 6.8.11 | ≥ 6.9, ≤ 6.9.2
Debian1 product
- linux< 6.1.94-1 | < 6.8.11-1
3 vendors · 119 products
