Description
In the Linux kernel, the following vulnerability has been resolved: x86, relocs: Ignore relocations in .notes section When building with CONFIG_XEN_PV=y, .text symbols are emitted into the .notes section so that Xen can find the "startup_xen" entry point. This information is used prior to booting the kernel, so relocations are not useful. In fact, performing relocations against the .notes section means that the KASLR base is exposed since /sys/kernel/notes is world-readable. To avoid leaking the KASLR base without breaking unprivileged tools that are expecting to read /sys/kernel/notes, skip performing relocations in the .notes section. The values readable in .notes are then identical to those found in System.map.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
5ead97c84fa7d63a6a7a2f4e9f18f452bd109045 to < 13edb509abc91c72152a11baaf0e7c060a312e03affected5ead97c84fa7d63a6a7a2f4e9f18f452bd109045 to < 52018aa146e3cf76569a9b1e6e49a2b7c8d4a088affected5ead97c84fa7d63a6a7a2f4e9f18f452bd109045 to < a4e7ff1a74274e59a2de9bb57236542aa990d20aaffected5ead97c84fa7d63a6a7a2f4e9f18f452bd109045 to < c7cff9780297d55d97ad068b68b703cfe53ef9afaffected5ead97c84fa7d63a6a7a2f4e9f18f452bd109045 to < 47635b112a64b7b208224962471e7e42f110e723affected5ead97c84fa7d63a6a7a2f4e9f18f452bd109045 to < af2a9f98d884205145fd155304a6955822ccca1caffected5ead97c84fa7d63a6a7a2f4e9f18f452bd109045 to < ae7079238f6faf1b94accfccf334e98b46a0c0aaaffected5ead97c84fa7d63a6a7a2f4e9f18f452bd109045 to < 5cb59db49c9c0fccfd33b2209af4f7ae3c6ddf40affected5ead97c84fa7d63a6a7a2f4e9f18f452bd109045 to < aaa8736370db1a78f0e8434344a484f9fd20be3baffected
Linux Linux
Default version status: affected
2.6.23affected0 to < 2.6.23unaffected4.19.311 to ≤ 4.19.*unaffected5.4.273 to ≤ 5.4.*unaffected5.10.214 to ≤ 5.10.*unaffected5.15.153 to ≤ 5.15.*unaffected6.1.83 to ≤ 6.1.*unaffected6.6.23 to ≤ 6.6.*unaffected6.7.11 to ≤ 6.7.*unaffected6.8.2 to ≤ 6.8.*unaffected6.9 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/13edb509abc91c72152a11baaf0e7c060a312e03 ↗
- https://git.kernel.org/stable/c/52018aa146e3cf76569a9b1e6e49a2b7c8d4a088 ↗
- https://git.kernel.org/stable/c/a4e7ff1a74274e59a2de9bb57236542aa990d20a ↗
- https://git.kernel.org/stable/c/c7cff9780297d55d97ad068b68b703cfe53ef9af ↗
- https://git.kernel.org/stable/c/47635b112a64b7b208224962471e7e42f110e723 ↗
- https://git.kernel.org/stable/c/af2a9f98d884205145fd155304a6955822ccca1c ↗
- https://git.kernel.org/stable/c/ae7079238f6faf1b94accfccf334e98b46a0c0aa ↗
- https://git.kernel.org/stable/c/5cb59db49c9c0fccfd33b2209af4f7ae3c6ddf40 ↗
- https://git.kernel.org/stable/c/aaa8736370db1a78f0e8434344a484f9fd20be3b ↗
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html ↗
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html ↗