In the Linux kernel, the following vulnerability has been resolved:
x86, relocs: Ignore relocations in .notes section
When building with CONFIG_XEN_PV=y, .text symbols are emitted into the .notes section so that Xen can find the "startup_xen" entry point. This information is used prior to booting the kernel, so relocations are not useful. In fact, performing relocations against the .notes section means that the KASLR base is exposed since /sys/kernel/notes is world-readable.
To avoid leaking the KASLR base without breaking unprivileged tools that are expecting to read /sys/kernel/notes, skip performing relocations in the .notes section. The values readable in .notes are then identical to those found in System.map.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.214-202.855Upgrade kernel-livepatch-5.15.153-100.162Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfo | Aug 19, 2024 | Apr 10, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade python3-perfUpgrade perfUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.84-99.169Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-libbpf-static | Feb 17, 2025 | Apr 10, 2024 |
| Debian | — | Upgrade linux | Apr 15, 2024 | Apr 10, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Apr 10, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 10, 2024 |
| Suse | — | Upgrade gfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-develUpgrade kernel-rt-optionalUpgrade dtb-lgUpgrade kernel-sourceUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-broadcomUpgrade kernel-source-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade kernel-rtUpgrade dtb-qcomUpgrade kernel-default-optionalUpgrade kernel-azureUpgrade kernel-kvmsmallUpgrade kernel-obs-buildUpgrade kernel-rt-livepatchUpgrade kernel-devel-azureUpgrade kselftests-kmp-64kbUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-develUpgrade kernel-azure-develUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade dtb-amazonUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-devel-rtUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-preemptUpgrade kernel-azure-livepatch-develUpgrade kernel-preempt-develUpgrade kernel-syms-azureUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-default-livepatchUpgrade kernel-azure-baseUpgrade dlm-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-amdUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade dtb-marvellUpgrade kernel-rt-vdsoUpgrade dtb-armUpgrade kernel-default-livepatch-develUpgrade dtb-rockchipUpgrade dtb-amlogicUpgrade cluster-md-kmp-64kbUpgrade kernel-docs-htmlUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-azure-extraUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-default-manUpgrade kernel-symsUpgrade kernel-syms-rtUpgrade dtb-renesasUpgrade dtb-appleUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dtb-sprdUpgrade dtb-socionextUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-develUpgrade kernel-debug | May 15, 2024 | Apr 10, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-raspi2Upgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-virtualUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oemUpgrade linux-image-intelUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1133-azureUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-generic-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-35-genericUpgrade linux-image-intel-iotgUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-lts-20.04 | Jul 1, 2024 | Apr 10, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub