In the Linux kernel, the following vulnerability has been resolved:
x86, relocs: Ignore relocations in .notes section
When building with CONFIG_XEN_PV=y, .text symbols are emitted into
the .notes section so that Xen can find the "startup_xen" entry point.
This information is used prior to booting the kernel, so relocations
are not useful. In fact, performing relocations against the .notes
section means that the KASLR base is exposed since /sys/kernel/notes
is world-readable.
To avoid leaking the KASLR base without breaking unprivileged tools that
are expecting to read /sys/kernel/notes, skip performing relocations in
the .notes section. The values readable in .notes are then identical to
those found in System.map.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
27 Mar 2025, 21:10
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-770 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| First Time |
Debian
Linux linux Kernel Debian debian Linux Linux |
|
| CPE | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
|
| References | () https://git.kernel.org/stable/c/13edb509abc91c72152a11baaf0e7c060a312e03 - Patch | |
| References | () https://git.kernel.org/stable/c/47635b112a64b7b208224962471e7e42f110e723 - Patch | |
| References | () https://git.kernel.org/stable/c/52018aa146e3cf76569a9b1e6e49a2b7c8d4a088 - Patch | |
| References | () https://git.kernel.org/stable/c/5cb59db49c9c0fccfd33b2209af4f7ae3c6ddf40 - Patch | |
| References | () https://git.kernel.org/stable/c/a4e7ff1a74274e59a2de9bb57236542aa990d20a - Patch | |
| References | () https://git.kernel.org/stable/c/aaa8736370db1a78f0e8434344a484f9fd20be3b - Patch | |
| References | () https://git.kernel.org/stable/c/ae7079238f6faf1b94accfccf334e98b46a0c0aa - Patch | |
| References | () https://git.kernel.org/stable/c/af2a9f98d884205145fd155304a6955822ccca1c - Patch | |
| References | () https://git.kernel.org/stable/c/c7cff9780297d55d97ad068b68b703cfe53ef9af - Patch | |
| References | () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - Mailing List | |
| References | () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html - Mailing List |
21 Nov 2024, 09:03
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| References | () https://git.kernel.org/stable/c/13edb509abc91c72152a11baaf0e7c060a312e03 - | |
| References | () https://git.kernel.org/stable/c/47635b112a64b7b208224962471e7e42f110e723 - | |
| References | () https://git.kernel.org/stable/c/52018aa146e3cf76569a9b1e6e49a2b7c8d4a088 - | |
| References | () https://git.kernel.org/stable/c/5cb59db49c9c0fccfd33b2209af4f7ae3c6ddf40 - | |
| References | () https://git.kernel.org/stable/c/a4e7ff1a74274e59a2de9bb57236542aa990d20a - | |
| References | () https://git.kernel.org/stable/c/aaa8736370db1a78f0e8434344a484f9fd20be3b - | |
| References | () https://git.kernel.org/stable/c/ae7079238f6faf1b94accfccf334e98b46a0c0aa - | |
| References | () https://git.kernel.org/stable/c/af2a9f98d884205145fd155304a6955822ccca1c - | |
| References | () https://git.kernel.org/stable/c/c7cff9780297d55d97ad068b68b703cfe53ef9af - |
05 Nov 2024, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
27 Jun 2024, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
25 Jun 2024, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
10 Apr 2024, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-10 14:15
Updated : 2025-03-27 21:10
NVD link : CVE-2024-26816
Mitre link : CVE-2024-26816
CVE.ORG link : CVE-2024-26816
JSON object : View
Products Affected
debian
- debian_linux
linux
- linux_kernel
CWE
CWE-770
Allocation of Resources Without Limits or Throttling