Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Linux Linux — regmap: maple: Fix cache corruption in regcache_maple_drop()
AV AC PR UI S C I A CVSS EPSS %ile KEV
L L L N U H N H 7.1 .0024 15.6 —
AFFECTED
Product Versions Fixed
Linux f033c26de5a5734625d2dd1dc196745fae186f1b – —
Linux 6.4 – 6.6.26
TIMELINE
May 17 Reserved by Linux
May 30 Published (CNA: Linux)
Aug 4 RESCORED — CVE-2024-36019 (Linux). CVSS 7.8 → 7.1 (NVD).
Description
In the Linux kernel, the following vulnerability has been resolved:
regmap: maple: Fix cache corruption in regcache_maple_drop()
When keeping the upper end of a cache block entry, the entry[] array
must be indexed by the offset from the base register of the block,
i.e. max - mas.index.
The code was indexing entry[] by only the register address, leading
to an out-of-bounds access that copied some part of the kernel
memory over the cache contents.
This bug was not detected by the regmap KUnit test because it only
tests with a block of registers starting at 0, so mas.index == 0.
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
| May 17, 2024 | Reserved | Reserved by Linux |
| May 30, 2024 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2024-36019 (Linux). CVSS 7.8 → 7.1 (NVD). |
Affected
Affected products and packages — 2 rows
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
| Linux | Linux | — | f033c26de5a5734625d2dd1dc196745fae186f1b | — |
| Linux | Linux | — | 6.4 | 6.6.26 |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2024-36019 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.