CVE-2024-46826
- Source
- https://cve.org/CVERecord?id=CVE-2024-46826
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-46826.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-46826
- Downstream
- Related
- Published
- 2024-09-27T12:39:25.860Z
- Modified
- 2026-05-28T03:52:54.543446083Z
- Summary
- ELF: fix kernel.randomize_va_space double read
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
ELF: fix kernel.randomizevaspace double read
ELF loader uses "randomizevaspace" twice. It is sysctl and can change at any moment, so 2 loads could see 2 different values in theory with unpredictable consequences.
Issue exactly one load for consistent value across one exec.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46826.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/stable/c/1cf8cd80903073440b6ea055811d04edd24fe4f7
- https://git.kernel.org/stable/c/1f81d51141a234ad0a3874b4d185dc27a521cd27
- https://git.kernel.org/stable/c/2a97388a807b6ab5538aa8f8537b2463c6988bd2
- https://git.kernel.org/stable/c/53f17409abf61f66b6f05aff795e938e5ba811d1
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46826.json
- https://nvd.nist.gov/vuln/detail/CVE-2024-46826
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced32a932332c8bad842804842eaf9651ad6268e637Fixed1f81d51141a234ad0a3874b4d185dc27a521cd27Fixed53f17409abf61f66b6f05aff795e938e5ba811d1Fixed1cf8cd80903073440b6ea055811d04edd24fe4f7Fixed2a97388a807b6ab5538aa8f8537b2463c6988bd2