CVE-2024-27008

Q: What is the severity of CVE-2024-27008?

CVE-2024-27008 has a CVSS score of 7.8 (HIGH). This vulnerability is an out-of-bounds memory access flaw in the Linux kernel's NVIDIA DRM driver (nv04). It allows attackers to potentially crash the system or execute arbitrary code by exploiting incorrect bit manipulation in the fabricate_dcb_output() function. Systems running affected Linux kernel versions with NVIDIA graphics hardware are vulnerable.

7.8 HIGH

Denial of Service

📋 TL;DR

This vulnerability is an out-of-bounds memory access flaw in the Linux kernel's NVIDIA DRM driver (nv04). It allows attackers to potentially crash the system or execute arbitrary code by exploiting incorrect bit manipulation in the fabricate_dcb_output() function. Systems running affected Linux kernel versions with NVIDIA graphics hardware are vulnerable.

💻 Affected Systems

Products:

Linux kernel with NVIDIA DRM driver (nv04)

Versions: Kernel versions before fixes in commits 097c7918fcfa1dee233acfd1f3029f00c3bc8062 and related patches

Operating Systems: Linux distributions using affected kernel versions

Default Config Vulnerable: ⚠️ Yes

Notes: Requires NVIDIA graphics hardware and the affected DRM driver to be loaded/used.

📦 What is this software?

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

Learn more about Linux Kernel →

Linux Kernel by Linux

Learn more about Linux Kernel →

Linux Kernel by Linux

Learn more about Linux Kernel →

Linux Kernel by Linux

Learn more about Linux Kernel →

Linux Kernel by Linux

Learn more about Linux Kernel →

Linux Kernel by Linux

Learn more about Linux Kernel →

Linux Kernel by Linux

Learn more about Linux Kernel →

Linux Kernel by Linux

Learn more about Linux Kernel →

Linux Kernel by Linux

Learn more about Linux Kernel →

Linux Kernel by Linux

Learn more about Linux Kernel →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Kernel panic leading to denial of service, or potential privilege escalation to kernel-level code execution allowing full system compromise.

🟠

Likely Case

System crash or instability requiring reboot, potentially causing data loss or service disruption.

🟢

If Mitigated

Limited impact if proper kernel hardening and privilege separation are in place, though crashes may still occur.

🌐 Internet-Facing: LOW - Requires local access or ability to execute code on the system.

🏢 Internal Only: MEDIUM - Local attackers or malicious users could exploit this to disrupt systems or escalate privileges.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Exploitation requires local access and knowledge of the vulnerability. No public exploits are known at this time.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Kernel versions containing commits 097c7918fcfa1dee233acfd1f3029f00c3bc8062, 26212da39ee14a52c76a202c6ae5153a84f579a5, 5050ae879a828d752b439e3827aac126709da6d1, 5fd4b090304e450aa0e7cc9cc2b4873285c6face, 6690cc2732e2a8d0eaca44dcbac032a4b0148042

Vendor Advisory: https://git.kernel.org/stable/c/097c7918fcfa1dee233acfd1f3029f00c3bc8062

Restart Required: Yes

Instructions:

1. Update Linux kernel to patched version from your distribution's repositories. 2. Reboot system to load new kernel. 3. Verify kernel version after reboot.

🔧 Temporary Workarounds

Disable NVIDIA DRM driver

linux

Prevent loading of the vulnerable nv04 DRM driver module

echo 'blacklist nouveau' >> /etc/modprobe.d/blacklist-nouveau.conf
update-initramfs -u
reboot

🧯 If You Can't Patch

Restrict local user access to systems with NVIDIA hardware
Implement strict privilege separation and limit users who can access graphics subsystems

🔍 How to Verify

Check if Vulnerable:

Check kernel version and if nouveau/nv04 modules are loaded: 'lsmod | grep nouveau' and 'uname -r'

Check Version:

uname -r

Verify Fix Applied:

Verify kernel version is updated and contains the fix commits: 'uname -r' and check kernel changelog

📡 Detection & Monitoring

Log Indicators:

Kernel oops messages in /var/log/kern.log or dmesg
System crashes or unexpected reboots

Network Indicators:

None - local vulnerability only

SIEM Query:

source="kernel" AND ("Oops" OR "BUG" OR "general protection fault") AND "nouveau"

📊 Metadata

CVE ID: CVE-2024-27008

CVSS v3 Score: 7.8 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE: CWE-125

Published: May 1, 2024

Last Updated: December 1, 2025

🔗 References

https://git.kernel.org/stable/c/097c7918fcfa1dee233acfd1f3029f00c3bc8062 Mailing List,Patch
https://git.kernel.org/stable/c/26212da39ee14a52c76a202c6ae5153a84f579a5 Mailing List,Patch
https://git.kernel.org/stable/c/5050ae879a828d752b439e3827aac126709da6d1 Mailing List,Patch
https://git.kernel.org/stable/c/5fd4b090304e450aa0e7cc9cc2b4873285c6face Mailing List,Patch
https://git.kernel.org/stable/c/6690cc2732e2a8d0eaca44dcbac032a4b0148042 Mailing List,Patch
https://git.kernel.org/stable/c/c2b97f26f081ceec3298151481687071075a25cb Mailing List,Patch
https://git.kernel.org/stable/c/cf92bb778eda7830e79452c6917efa8474a30c1e Mailing List,Patch
https://git.kernel.org/stable/c/df0991da7db846f7fa4ec6740350f743d3b69b04 Mailing List,Patch
https://git.kernel.org/stable/c/097c7918fcfa1dee233acfd1f3029f00c3bc8062 Mailing List,Patch
https://git.kernel.org/stable/c/26212da39ee14a52c76a202c6ae5153a84f579a5 Mailing List,Patch
https://git.kernel.org/stable/c/5050ae879a828d752b439e3827aac126709da6d1 Mailing List,Patch
https://git.kernel.org/stable/c/5fd4b090304e450aa0e7cc9cc2b4873285c6face Mailing List,Patch
https://git.kernel.org/stable/c/6690cc2732e2a8d0eaca44dcbac032a4b0148042 Mailing List,Patch
https://git.kernel.org/stable/c/c2b97f26f081ceec3298151481687071075a25cb Mailing List,Patch
https://git.kernel.org/stable/c/cf92bb778eda7830e79452c6917efa8474a30c1e Mailing List,Patch
https://git.kernel.org/stable/c/df0991da7db846f7fa4ec6740350f743d3b69b04 Mailing List,Patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html Mailing List,Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html Mailing List,Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EZ6PJW7VOZ224TD7N4JZNU6KV32ZJ53/ Mailing List,Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DAMSOZXJEPUOXW33WZYWCVAY7Z5S7OOY/ Mailing List,Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GCBZZEC7L7KTWWAS2NLJK6SO3IZIL4WW/ Mailing List,Third Party Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Debian Linux by Debian

Fedora by Fedoraproject

Fedora by Fedoraproject

Fedora by Fedoraproject

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

⚠️ Risk & Real-World Impact

Worst Case

Likely Case

If Mitigated

🎯 Exploit Status

🛠️ Fix & Mitigation

✅ Official Fix

Instructions:

🔧 Temporary Workarounds

Disable NVIDIA DRM driver

🧯 If You Can't Patch

🔍 How to Verify

Check if Vulnerable:

Check Version:

Verify Fix Applied:

📡 Detection & Monitoring

Log Indicators:

Network Indicators:

SIEM Query:

📊 Metadata

🔗 References

📤 Share & Export

🔗 Related Vulnerabilities