CVE-2024-35918: randomize_kstack: Improve entropy diffusion
In the Linux kernel, the following vulnerability has been resolved:
randomizekstack: Improve entropy diffusion
The Linux kernel CVE team has assigned CVE-2024-35918 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051912-CVE-2024-35918-3fed@gregkh/T
Other sources
In the Linux kernel, the following vulnerability has been resolved: randomizekstack: Improve entropy diffusion The kstackoffset variable was really only ever using the low bits for kernel stack offset entropy. Add a ror32() to increase bit diffusion.
— Launchpad
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
— NVD
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35918?
CVE-2024-35918 has a high severity rating due to its potential impact on system security.
How do I fix CVE-2024-35918?
To fix CVE-2024-35918, update the Linux kernel to versions 5.15.155, 6.1.86, 6.6.27, 6.8.6, or 6.9.
What software is affected by CVE-2024-35918?
CVE-2024-35918 affects specific versions of the Linux kernel distributed by Red Hat.
What is the nature of the vulnerability in CVE-2024-35918?
CVE-2024-35918 involves an improvement to entropy diffusion in the randomize_kstack functionality of the Linux kernel.
Is there a known exploit for CVE-2024-35918?
As of now, there are no publicly reported exploits for CVE-2024-35918.