A memory leak vulnerability in the Linux kernel nouveau driver allows a local authenticated attacker to potentially compromise system integrity and availability.

This is a memory management vulnerability in the nouveau driver: specifically, a mismatched DMA unmap size for large folios during device-private THP migration. An attacker with local low-privileged access can trigger this flaw to leak IOMMU/IOVA mappings.

The vulnerability carries a CVSS score of 8.8, reflecting its high severity due to the potential for complete system compromise. By leaking memory mappings, an attacker may be able to cause kernel panics, resulting in denial of service, or potentially gain unauthorized access to sensitive system memory regions. This poses a significant risk to the availability and security of infrastructure running affected Linux kernel versions.

Immediate Action: Update the Linux kernel to version 7.2.5 or later, or apply the upstream fix commits 4deb29b9d33bfdb3de4d2d9944947ecf77221e42 or caa1bc2a0a6ca19dcb90bbf88208b0fe2decd66f.

Proactive Monitoring: Monitor system logs for kernel oops or unexpected hardware-related errors originating from the nouveau driver that may indicate exploitation attempts.

Compensating Controls: Restrict local access to systems utilizing the nouveau driver and ensure that only authorized users have the capability to execute processes that interact with GPU memory migration functions.

Public Exploit Available: Unknown

Given the high CVSS score and the potential for kernel-level impact, organizations should prioritize patching affected systems. Applying the kernel update to version 7.2.5 is the most effective way to eliminate this vulnerability and prevent potential exploitation of the memory leak.