In the Linux kernel, the following vulnerability has been resolved:
x86, relocs: Ignore relocations in .notes section
When building with CONFIG_XEN_PV=y, .text symbols are emitted into the .notes section so that Xen can find the "startup_xen" entry point. This information is used prior to booting the kernel, so relocations are not useful. In fact, performing relocations against the .notes section means that the KASLR base is exposed since /sys/kernel/notes is world-readable.
To avoid leaking the KASLR base without breaking unprivileged tools that are expecting to read /sys/kernel/notes, skip performing relocations in the .notes section. The values readable in .notes are then identical to those found in System.map.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.214-202.855Upgrade bpftoolUpgrade python-perfUpgrade kernel-livepatch-5.15.153-100.162Upgrade kernel-debuginfo-common-x86_64 | Aug 19, 2024 | Apr 10, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade perfUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.84-99.169Upgrade kernelUpgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf | Feb 17, 2025 | Apr 10, 2024 |
| Debian | — | Upgrade linux | Apr 15, 2024 | Apr 10, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Apr 10, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 10, 2024 |
| Suse | — | Upgrade dtb-apmUpgrade dtb-appleUpgrade dtb-renesasUpgrade kernel-symsUpgrade kernel-default-manUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-rtUpgrade dtb-armUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade dtb-rockchipUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-azureUpgrade dtb-sprdUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-obs-qaUpgrade kernel-azure-extraUpgrade kernel-debugUpgrade kernel-azure-baseUpgrade kernel-macrosUpgrade dlm-kmp-rtUpgrade kernel-rt_debugUpgrade dtb-amdUpgrade dtb-nvidiaUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-default-extraUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-socionextUpgrade dtb-hisiliconUpgrade kernel-default-baseUpgrade kernel-rt-extraUpgrade kernel-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade kernel-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-syms-azureUpgrade dtb-mediatekUpgrade dtb-amazonUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-lgUpgrade dtb-broadcomUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-develUpgrade kernel-rt-optionalUpgrade dtb-caviumUpgrade dtb-qcomUpgrade ocfs2-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade dtb-exynosUpgrade kernel-azure-develUpgrade kernel-azureUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade kernel-preemptUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-zfcpdump | May 15, 2024 | Apr 10, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-raspi2Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1063-awsUpgrade linux-image-virtualUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1133-azureUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-35-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azureUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-bluefieldUpgrade linux-image-raspiUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-generic-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.8.0-1008-azureUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-oemUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1009-awsUpgrade linux-image-generic-lpae | Jul 1, 2024 | Apr 10, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub