In the Linux kernel, the following vulnerability has been resolved:
x86, relocs: Ignore relocations in .notes section
When building with CONFIG_XEN_PV=y, .text symbols are emitted into the .notes section so that Xen can find the "startup_xen" entry point. This information is used prior to booting the kernel, so relocations are not useful. In fact, performing relocations against the .notes section means that the KASLR base is exposed since /sys/kernel/notes is world-readable.
To avoid leaking the KASLR base without breaking unprivileged tools that are expecting to read /sys/kernel/notes, skip performing relocations in the .notes section. The values readable in .notes are then identical to those found in System.map.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.214-202.855Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.153-100.162Upgrade python-perfUpgrade kernel-livepatch-4.14.343-259.562Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Aug 19, 2024 | Apr 10, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.84-99.169Upgrade kernel-modules-extra-commonUpgrade perfUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool | Feb 17, 2025 | Apr 10, 2024 |
| Debian | — | Upgrade linux | Apr 15, 2024 | Apr 10, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Apr 10, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 10, 2024 |
| Suse | — | Upgrade kernel-azure-extraUpgrade kernel-symsUpgrade kernel-default-manUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade kernel-azure-baseUpgrade kernel-rt_debugUpgrade kernel-64kb-optionalUpgrade kernel-default-extraUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-macrosUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-syms-rtUpgrade dtb-amlogicUpgrade dtb-armUpgrade dtb-sprdUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade cluster-md-kmp-64kbUpgrade dtb-marvellUpgrade kernel-rt-vdsoUpgrade dlm-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-debugUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dtb-nvidiaUpgrade kernel-obs-qaUpgrade kernel-debug-develUpgrade dtb-amdUpgrade dtb-rockchipUpgrade dtb-apmUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-preemptUpgrade kernel-obs-buildUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade kernel-azureUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-azure-develUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-amazonUpgrade kernel-devel-rtUpgrade kernel-default-develUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-preempt-develUpgrade kernel-kvmsmall-develUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade kernel-devel-azureUpgrade gfs2-kmp-azureUpgrade dtb-xilinxUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-base-rebuildUpgrade dtb-lgUpgrade dtb-broadcomUpgrade kernel-debug-vdsoUpgrade kernel-syms-azureUpgrade kernel-develUpgrade kernel-64kbUpgrade dtb-mediatekUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-rt-optionalUpgrade kernel-rtUpgrade kernel-64kb-livepatch-devel | May 15, 2024 | Apr 10, 2024 |
| Ubuntu | — | Upgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-kvmUpgrade linux-image-oem-24.04aUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1006-oemUpgrade linux-image-raspi2Upgrade linux-image-gcpUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1040-iotUpgrade linux-image-ibm-classicUpgrade linux-image-oracle-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-intel-iotgUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.8.0-1009-awsUpgrade linux-image-gkeUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-bluefieldUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-5.4.0-1133-azure | Jul 1, 2024 | Apr 10, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub