In the Linux kernel, the following vulnerability has been resolved:
x86, relocs: Ignore relocations in .notes section
When building with CONFIG_XEN_PV=y, .text symbols are emitted into the .notes section so that Xen can find the "startup_xen" entry point. This information is used prior to booting the kernel, so relocations are not useful. In fact, performing relocations against the .notes section means that the KASLR base is exposed since /sys/kernel/notes is world-readable.
To avoid leaking the KASLR base without breaking unprivileged tools that are expecting to read /sys/kernel/notes, skip performing relocations in the .notes section. The values readable in .notes are then identical to those found in System.map.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade perfUpgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-livepatch-5.15.153-100.162Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.214-202.855Upgrade perf-debuginfo | Aug 19, 2024 | Apr 10, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernel-livepatch-6.1.84-99.169Upgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade kernelUpgrade kernel-toolsUpgrade perf | Feb 17, 2025 | Apr 10, 2024 |
| Debian | — | Upgrade linux | Apr 15, 2024 | Apr 10, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Apr 10, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 10, 2024 |
| Suse | — | Upgrade gfs2-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-default-vdsoUpgrade kernel-source-vanillaUpgrade kernel-azure-optionalUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade gfs2-kmp-defaultUpgrade dtb-amazonUpgrade kernel-rtUpgrade dtb-qcomUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-exynosUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-develUpgrade kernel-rt_debug-develUpgrade kernel-azure-develUpgrade dtb-broadcomUpgrade kernel-64kbUpgrade kernel-develUpgrade dtb-mediatekUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade kernel-devel-azureUpgrade dtb-lgUpgrade kernel-azure-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade kernel-obs-buildUpgrade kernel-kvmsmallUpgrade kselftests-kmp-azureUpgrade dtb-freescaleUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatchUpgrade kernel-preemptUpgrade kernel-preempt-develUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-azureUpgrade kernel-default-develUpgrade kernel-devel-rtUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-rt-optionalUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade kernel-azureUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade dtb-nvidiaUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade kernel-rt_debug-vdsoUpgrade dtb-amdUpgrade kernel-debug-livepatch-develUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-hisiliconUpgrade dtb-socionextUpgrade dtb-renesasUpgrade dtb-apmUpgrade dtb-appleUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dtb-sprdUpgrade kselftests-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-default-manUpgrade kernel-symsUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-docs-htmlUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade dtb-armUpgrade kernel-azure-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-default | May 15, 2024 | Apr 10, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-189-genericUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1063-awsUpgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1128-awsUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-intelUpgrade linux-image-oemUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-azureUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-nvidiaUpgrade linux-image-oem-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1008-azureUpgrade linux-image-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-raspi-hwe-18.04 | Jul 1, 2024 | Apr 10, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 10, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub