Riskcovery

CVE-2024-46826

ELF: fix kernel.randomize_va_space double read

State
Published
Severity
Not scored
Published
Sep 27, 2024
Updated
May 11, 2026
Reserved
Sep 11, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ELF: fix kernel.randomize_va_space double read

ELF loader uses "randomize_va_space" twice. It is sysctl and can change at any moment, so 2 loads could see 2 different values in theory with unpredictable consequences.

Issue exactly one load for consistent value across one exec.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 32a932332c8bad842804842eaf9651ad6268e637 to before 1f81d51141a234ad0a3874b4d185dc27a521cd27Affected
  • 32a932332c8bad842804842eaf9651ad6268e637 to before 53f17409abf61f66b6f05aff795e938e5ba811d1Affected
  • 32a932332c8bad842804842eaf9651ad6268e637 to before 1cf8cd80903073440b6ea055811d04edd24fe4f7Affected
  • 32a932332c8bad842804842eaf9651ad6268e637 to before 2a97388a807b6ab5538aa8f8537b2463c6988bd2Affected
LinuxLinux
  • 2.6.25Affected
  • before 2.6.25Not affected
  • 6.1.110 through 6.1.*Not affected
  • 6.6.51 through 6.6.*Not affected
  • 6.10.10 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.