5.5

CVE-2024-46826

ELF: fix kernel.randomize_va_space double read

In the Linux kernel, the following vulnerability has been resolved:

ELF: fix kernel.randomize_va_space double read

ELF loader uses "randomize_va_space" twice. It is sysctl and can change
at any moment, so 2 loads could see 2 different values in theory with
unpredictable consequences.

Issue exactly one load for consistent value across one exec.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 6.1.110
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.51
Linux ≫ Linux Kernel Version >= 6.7 < 6.10.10
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.16
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/1cf8cd80903073440b6ea055811d04edd24fe4f7
Patch
https://git.kernel.org/stable/c/1f81d51141a234ad0a3874b4d185dc27a521cd27
Patch
https://git.kernel.org/stable/c/2a97388a807b6ab5538aa8f8537b2463c6988bd2
Patch
https://git.kernel.org/stable/c/53f17409abf61f66b6f05aff795e938e5ba811d1
Patch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html