CVE-2024-26816x86, relocs: Ignore relocations in .notes section
Updated under an hour ago ()
Does this affect you?
It affects Linux and 3 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: x86, relocs: Ignore relocations in .notes section When building with CONFIG_XEN_PV=y, .text symbols are emitted into the .notes section so that Xen can find the "startup_xen" entry point. This information is used prior to booting the kernel, so relocations are not useful. In fact, performing relocations against the .notes section means that the KASLR base is exposed since /sys/kernel/notes is world-readable. To avoid leaking the KASLR base without breaking unprivileged tools that are expecting to read /sys/kernel/notes, skip performing relocations in the .notes section. The values readable in .notes are then identical to those found in System.map.
- CVSS
- 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 15, 2026
Affected products
Linux Linux linux:linux (from the name) | from 5ead97c84fa7d63a6a7a2f4e9f18f452bd109045 before 13edb509abc91c72152a11baaf0e7c060a312e03; from 5ead97c84fa7d63a6a7a2f4e9f18f452bd109045 before 52018aa146e3cf76569a9b1e6e49a2b7c8d4a088; from 5ead97c84fa7d63a6a7a2f4e9f18f452bd109045 before a4e7ff1a74274e59a2de9bb57236542aa990d20a; from 5ead97c84fa7d63a6a7a2f4e9f18f452bd109045 before c7cff9780297d55d97ad068b68b703cfe53ef9af; from 5ead97c84fa7d63a6a7a2f4e9f18f452bd109045 before 47635b112a64b7b208224962471e7e42f110e723; from 5ead97c84fa7d63a6a7a2f4e9f18f452bd109045 before af2a9f98d884205145fd155304a6955822ccca1c; from 5ead97c84fa7d63a6a7a2f4e9f18f452bd109045 before ae7079238f6faf1b94accfccf334e98b46a0c0aa; 5ead97c84fa7d63a6a7a2f4e9f18f452bd109045 builds before 5cb59db49c9c0fccfd33b2209af4f7ae3c6ddf40; and 1 more ranges | CNA record |
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name) | before V1.1.1 | CISA ADP |
linux linux_kernel linux:linux_kernel | from 2.6.23 before 4.19.311; from 4.20 before 5.4.273; from 5.5 before 5.10.214; from 5.11 before 5.15.153; from 5.16 before 6.1.83; from 6.2 before 6.6.23; from 6.7 before 6.7.11; from 6.8 before 6.8.2; and 1 more ranges | NVD |
debian debian_linux debian:debian_linux | 10.0 | NVD |
References
- https://git.kernel.org/stable/c/13edb509abc91c72152a11baaf0e7c060a312e03patch
- https://git.kernel.org/stable/c/52018aa146e3cf76569a9b1e6e49a2b7c8d4a088patch
- https://git.kernel.org/stable/c/a4e7ff1a74274e59a2de9bb57236542aa990d20apatch
- https://git.kernel.org/stable/c/c7cff9780297d55d97ad068b68b703cfe53ef9afpatch
- https://git.kernel.org/stable/c/47635b112a64b7b208224962471e7e42f110e723patch
- https://git.kernel.org/stable/c/af2a9f98d884205145fd155304a6955822ccca1cpatch
- https://git.kernel.org/stable/c/ae7079238f6faf1b94accfccf334e98b46a0c0aapatch
- https://git.kernel.org/stable/c/5cb59db49c9c0fccfd33b2209af4f7ae3c6ddf40patch
- https://git.kernel.org/stable/c/aaa8736370db1a78f0e8434344a484f9fd20be3bpatch
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.htmlmailing-list
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.htmlmailing-list
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.