https://seclists.org/oss-sec/2024/q3/125: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch
Published Jul 30, 2024
·Updated
Affected Software
1 affected component
Linux Kernel
Frequently Asked Questions
1
Which systems are addressed by the reported fix?
The report states that IA-32 kernels are fixed in Linux kernel 6.11. The code change uses !IS_ENABLED(CONFIG_64BIT), which is intended to work across architectures.
2
What evidence is provided that the fix works?
The report includes a test on 6.11 showing nonzero entropy for mapped executable, heap, locale archive, vvar, and stack regions. This is presented as confirmation that ASLR is functioning as expected on the tested system.