CVE-2024-46826

Published: Sep 27, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: ELF: fix kernel.randomize_va_space double read ELF loader uses "randomize_va_space" twice. It is sysctl and can change at any moment, so 2 loads could see 2 different values in theory with unpredictable consequences. Issue exactly one load for consistent value across one exec.

Vendor	Product	Versions
Linux	Linux	affected `32a932332c8bad842804842eaf9651ad6268e637 - < 1f81d51141a234ad0a3874b4d185dc27a521cd27` affected `32a932332c8bad842804842eaf9651ad6268e637 - < 53f17409abf61f66b6f05aff795e938e5ba811d1` affected `32a932332c8bad842804842eaf9651ad6268e637 - < 1cf8cd80903073440b6ea055811d04edd24fe4f7` affected `32a932332c8bad842804842eaf9651ad6268e637 - < 2a97388a807b6ab5538aa8f8537b2463c6988bd2`
Linux	Linux	affected `2.6.25` unaffected `0 - < 2.6.25` unaffected `6.1.110 - <= 6.1.` unaffected `6.6.51 - <= 6.6.` unaffected `6.10.10 - <= 6.10.*` +1 more versions

References

https://git.kernel.org/stable/c/1f81d51141a234ad0a3874b4d185dc27a521cd27

https://git.kernel.org/stable/c/53f17409abf61f66b6f05aff795e938e5ba811d1

https://git.kernel.org/stable/c/1cf8cd80903073440b6ea055811d04edd24fe4f7

https://git.kernel.org/stable/c/2a97388a807b6ab5538aa8f8537b2463c6988bd2

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2024-46826

Description

Affected Products

References