CVE-2024-26816: x86, relocs: Ignore relocations in .notes section
First published: Wed Apr 10 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: x86, relocs: Ignore relocations in .notes section When building with CONFIG_XEN_PV=y, .text symbols are emitted into the .notes section so that Xen can find the "startup_xen" entry point. This information is used prior to booting the kernel, so relocations are not useful. In fact, performing relocations against the .notes section means that the KASLR base is exposed since /sys/kernel/notes is world-readable. To avoid leaking the KASLR base without breaking unprivileged tools that are expecting to read /sys/kernel/notes, skip performing relocations in the .notes section. The values readable in .notes are then identical to those found in System.map.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel | >=2.6.23<4.19.311 | |
| Linux Kernel | >=4.20<5.4.273 | |
| Linux Kernel | >=5.5<5.10.214 | |
| Linux Kernel | >=5.11<5.15.153 | |
| Linux Kernel | >=5.16<6.1.83 | |
| Linux Kernel | >=6.2<6.6.23 | |
| Linux Kernel | >=6.7<6.7.11 | |
| Linux Kernel | >=6.8<6.8.2 | |
| Linux Kernel | >=6.8.3<=6.8.12 | |
| Debian Linux | =10.0 | |
| debian/linux | 5.10.223-1 5.10.234-1 6.1.129-1 6.1.128-1 6.12.21-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/13edb509abc91c72152a11baaf0e7c060a312e03
- https://git.kernel.org/stable/c/47635b112a64b7b208224962471e7e42f110e723
- https://git.kernel.org/stable/c/52018aa146e3cf76569a9b1e6e49a2b7c8d4a088
- https://git.kernel.org/stable/c/5cb59db49c9c0fccfd33b2209af4f7ae3c6ddf40
- https://git.kernel.org/stable/c/a4e7ff1a74274e59a2de9bb57236542aa990d20a
- https://git.kernel.org/stable/c/aaa8736370db1a78f0e8434344a484f9fd20be3b
- https://git.kernel.org/stable/c/ae7079238f6faf1b94accfccf334e98b46a0c0aa
- https://git.kernel.org/stable/c/af2a9f98d884205145fd155304a6955822ccca1c
- https://git.kernel.org/stable/c/c7cff9780297d55d97ad068b68b703cfe53ef9af
- https://launchpad.net/bugs/cve/CVE-2024-26816
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26816
- https://nvd.nist.gov/vuln/detail/CVE-2024-26816
- https://security-tracker.debian.org/tracker/CVE-2024-26816
- https://ubuntu.com/security/CVE-2024-26816
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
- https://git.kernel.org/linus/aaa8736370db1a78f0e8434344a484f9fd20be3b
Frequently Asked Questions
What is the severity of CVE-2024-26816?
CVE-2024-26816 is considered a medium severity vulnerability affecting the Linux kernel.
How do I fix CVE-2024-26816?
To remediate CVE-2024-26816, ensure you update your Linux kernel to the patched versions: 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.13-1.
Which versions of Linux are affected by CVE-2024-26816?
CVE-2024-26816 affects multiple versions of the Linux kernel, specifically those that allow CONFIG_XEN_PV.
What components are impacted by CVE-2024-26816?
CVE-2024-26816 specifically impacts the .notes section in the Linux kernel where .text symbols are emitted.
Is there a workaround for CVE-2024-26816?
There are no documented workarounds for CVE-2024-26816, so upgrading to a patched kernel version is recommended.
- agent/title
- agent/type
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- agent/author
- collector/nvd-cve
- source/NVD
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/trending
- agent/source
- collector/usn-cve
- source/Ubuntu
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/softwarecombine
- collector/security-tracker-debian
- source/Debian
- agent/software-canonical-lookup
- agent/tags
- agent/event
- collector/nvd-api
- package-manager/debian
- vendor/linux
- canonical/linux kernel
- version/linux kernel/2.6.23
- version/linux kernel/4.20
- version/linux kernel/5.5
- version/linux kernel/5.11
- version/linux kernel/5.16
- version/linux kernel/6.2
- version/linux kernel/6.7
- version/linux kernel/6.8
- version/linux kernel/6.8.3
- version/linux kernel/6.8.12
- vendor/debian
- canonical/debian linux
- version/debian linux/10.0