CVE-2024-26816: x86, relocs: Ignore relocations in .notes section
In the Linux kernel, the following vulnerability has been resolved:
x86, relocs: Ignore relocations in .notes section
When building with CONFIGXENPV=y, .text symbols are emitted into the .notes section so that Xen can find the "startupxen" entry point. This information is used prior to booting the kernel, so relocations are not useful. In fact, performing relocations against the .notes section means that the KASLR base is exposed since /sys/kernel/notes is world-readable.
To avoid leaking the KASLR base without breaking unprivileged tools that are expecting to read /sys/kernel/notes, skip performing relocations in the .notes section. The values readable in .notes are then identical to those found in System.map.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26816?
CVE-2024-26816 is considered a medium severity vulnerability affecting the Linux kernel.
How do I fix CVE-2024-26816?
To remediate CVE-2024-26816, ensure you update your Linux kernel to the patched versions: 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.13-1.
Which versions of Linux are affected by CVE-2024-26816?
CVE-2024-26816 affects multiple versions of the Linux kernel, specifically those that allow CONFIG_XEN_PV.
What components are impacted by CVE-2024-26816?
CVE-2024-26816 specifically impacts the .notes section in the Linux kernel where .text symbols are emitted.
Is there a workaround for CVE-2024-26816?
There are no documented workarounds for CVE-2024-26816, so upgrading to a patched kernel version is recommended.