Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-26816— x86, relocs: Ignore relocations in .notes section

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于重定位没有作用。

AI Predicted 7.5 Difficulty: Easy EPSS 0.31% · P22

Possible ATT&CK Techniques 1 AI

T1083 · File and Directory Discovery

Affected Version Matrix 20

VendorProduct Version RangeStatus
Linux Linux 5ead97c84fa7d63a6a7a2f4e9f18f452bd109045< 13edb509abc91c72152a11baaf0e7c060a312e03 affected
5ead97c84fa7d63a6a7a2f4e9f18f452bd109045< 52018aa146e3cf76569a9b1e6e49a2b7c8d4a088 affected
5ead97c84fa7d63a6a7a2f4e9f18f452bd109045< a4e7ff1a74274e59a2de9bb57236542aa990d20a affected
5ead97c84fa7d63a6a7a2f4e9f18f452bd109045< c7cff9780297d55d97ad068b68b703cfe53ef9af affected
5ead97c84fa7d63a6a7a2f4e9f18f452bd109045< 47635b112a64b7b208224962471e7e42f110e723 affected
5ead97c84fa7d63a6a7a2f4e9f18f452bd109045< af2a9f98d884205145fd155304a6955822ccca1c affected
5ead97c84fa7d63a6a7a2f4e9f18f452bd109045< ae7079238f6faf1b94accfccf334e98b46a0c0aa affected
5ead97c84fa7d63a6a7a2f4e9f18f452bd109045< 5cb59db49c9c0fccfd33b2209af4f7ae3c6ddf40 affected
… +12 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-26816

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
x86, relocs: Ignore relocations in .notes section
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: x86, relocs: Ignore relocations in .notes section When building with CONFIG_XEN_PV=y, .text symbols are emitted into the .notes section so that Xen can find the "startup_xen" entry point. This information is used prior to booting the kernel, so relocations are not useful. In fact, performing relocations against the .notes section means that the KASLR base is exposed since /sys/kernel/notes is world-readable. To avoid leaking the KASLR base without breaking unprivileged tools that are expecting to read /sys/kernel/notes, skip performing relocations in the .notes section. The values readable in .notes are then identical to those found in System.map.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于重定位没有作用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 5ead97c84fa7d63a6a7a2f4e9f18f452bd109045 ~ 13edb509abc91c72152a11baaf0e7c060a312e03 -
Linux Linux 2.6.23 -

II. Public POCs for CVE-2024-26816

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-26816

请登录查看更多情报信息。

Mailing List Discussions for CVE-2024-26816 (2)

Other References for CVE-2024-26816 (8)

Same Patch Batch · Linux · 2024-04-10 · 39 CVEs total

CVE-2021-47215 9.8 CRITICAL net/mlx5e: kTLS, Fix crash in RX resync flow
CVE-2021-47183 8.8 HIGH scsi: lpfc: Fix link down processing to address NULL pointer dereference
CVE-2021-47184 8.8 HIGH i40e: Fix NULL ptr dereference on VSI filter sync
CVE-2021-47203 8.8 HIGH scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
CVE-2021-47189 7.8 HIGH btrfs: fix memory ordering between normal and ordered work functions
CVE-2021-47197 7.8 HIGH net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove()
CVE-2021-47196 7.8 HIGH RDMA/core: Set send and receive CQ before forwarding to the driver
CVE-2021-47209 7.8 HIGH sched/fair: Prevent dead task groups from regaining cfs_rq's
CVE-2021-47194 7.8 HIGH cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
CVE-2024-26815 7.8 HIGH net/sched: taprio: proper TCA_TAPRIO_TC_ENTRY_INDEX check
CVE-2021-47200 7.8 HIGH drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
CVE-2021-47201 7.8 HIGH iavf: free q_vectors before queues in iavf_disable_vf
CVE-2021-47188 7.8 HIGH scsi: ufs: core: Improve SCSI abort handling
CVE-2021-47191 7.1 HIGH scsi: scsi_debug: Fix out-of-bound read in resp_readcap16()
CVE-2021-47219 7.1 HIGH scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs()
CVE-2021-47206 usb: host: ohci-tmio: check return value after calling platform_get_resource()
CVE-2021-47207 ALSA: gus: fix null pointer dereference on pointer block
CVE-2021-47199 net/mlx5e: CT, Fix multiple allocations and memleak of mod acts
CVE-2021-47210 usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
CVE-2021-47211 ALSA: usb-audio: fix null pointer dereference on pointer cs_desc

Showing top 20 of 39 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2024-26816

No comments yet

Leave a comment