Description
In the Linux kernel, the following vulnerability has been resolved: ELF: fix kernel.randomize_va_space double read ELF loader uses "randomize_va_space" twice. It is sysctl and can change at any moment, so 2 loads could see 2 different values in theory with unpredictable consequences. Issue exactly one load for consistent value across one exec.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
32a932332c8bad842804842eaf9651ad6268e637 to < 1f81d51141a234ad0a3874b4d185dc27a521cd27affected32a932332c8bad842804842eaf9651ad6268e637 to < 53f17409abf61f66b6f05aff795e938e5ba811d1affected32a932332c8bad842804842eaf9651ad6268e637 to < 1cf8cd80903073440b6ea055811d04edd24fe4f7affected32a932332c8bad842804842eaf9651ad6268e637 to < 2a97388a807b6ab5538aa8f8537b2463c6988bd2affected
Linux Linux
Default version status: affected
2.6.25affected0 to < 2.6.25unaffected6.1.110 to ≤ 6.1.*unaffected6.6.51 to ≤ 6.6.*unaffected6.10.10 to ≤ 6.10.*unaffected6.11 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/1f81d51141a234ad0a3874b4d185dc27a521cd27 ↗
- https://git.kernel.org/stable/c/53f17409abf61f66b6f05aff795e938e5ba811d1 ↗
- https://git.kernel.org/stable/c/1cf8cd80903073440b6ea055811d04edd24fe4f7 ↗
- https://git.kernel.org/stable/c/2a97388a807b6ab5538aa8f8537b2463c6988bd2 ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗