CVE-2024-46826: ELF: fix kernel.randomize_va_space double read
In the Linux kernel, the following vulnerability has been resolved:
ELF: fix kernel.randomizevaspace double read
ELF loader uses "randomizevaspace" twice. It is sysctl and can change at any moment, so 2 loads could see 2 different values in theory with unpredictable consequences.
Issue exactly one load for consistent value across one exec.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46826?
CVE-2024-46826 is considered a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-46826?
To fix CVE-2024-46826, update the Linux kernel to version 6.1.123-1 or any later version as specified in the patches.
Which versions of the Linux kernel are affected by CVE-2024-46826?
CVE-2024-46826 affects Linux kernel versions between 6.2 and 6.10.10, as well as up to version 6.1.110.
What is the impact of CVE-2024-46826?
The impact of CVE-2024-46826 could lead to unpredictable behavior due to inconsistent reading of the 'randomize_va_space' setting.
Is CVE-2024-46826 present in Debian Linux packages?
Yes, CVE-2024-46826 is present in various Debian Linux packages before the patched versions listed in the official repositories.