In the Linux kernel, the following vulnerability has been resolved:
ELF: fix kernel.randomizevaspace double read
ELF loader uses "randomizevaspace" twice. It is sysctl and can change at any moment, so 2 loads could see 2 different values in theory with unpredictable consequences.
Issue exactly one load for consistent value across one exec.
[
{
"deprecated": false,
"digest": {
"line_hashes": [
"110756040155446661638399153056351922469",
"152138396750815713208195591315959751465",
"224872104627714088050776442538268639789",
"216910388039031525444682546449373662737",
"320601371872762193432274124572660750983",
"21811402781213417879013681892133927946",
"232539321343181812043336889885927774477",
"102917838056295199038606580469264748510"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f81d51141a234ad0a3874b4d185dc27a521cd27",
"target": {
"file": "fs/binfmt_elf.c"
},
"id": "CVE-2024-46826-05131abb",
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"110756040155446661638399153056351922469",
"152138396750815713208195591315959751465",
"224872104627714088050776442538268639789",
"216910388039031525444682546449373662737",
"320601371872762193432274124572660750983",
"21811402781213417879013681892133927946",
"232539321343181812043336889885927774477",
"102917838056295199038606580469264748510"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1cf8cd80903073440b6ea055811d04edd24fe4f7",
"target": {
"file": "fs/binfmt_elf.c"
},
"id": "CVE-2024-46826-236645d9",
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"110756040155446661638399153056351922469",
"152138396750815713208195591315959751465",
"224872104627714088050776442538268639789",
"216910388039031525444682546449373662737",
"320601371872762193432274124572660750983",
"21811402781213417879013681892133927946",
"232539321343181812043336889885927774477",
"102917838056295199038606580469264748510"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2a97388a807b6ab5538aa8f8537b2463c6988bd2",
"target": {
"file": "fs/binfmt_elf.c"
},
"id": "CVE-2024-46826-2a86735c",
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"digest": {
"function_hash": "336338162846145385131595523501510345491",
"length": 7493.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f81d51141a234ad0a3874b4d185dc27a521cd27",
"target": {
"file": "fs/binfmt_elf.c",
"function": "load_elf_binary"
},
"id": "CVE-2024-46826-2e2acddb",
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"digest": {
"function_hash": "201347459934019458574206187992619350294",
"length": 7028.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1cf8cd80903073440b6ea055811d04edd24fe4f7",
"target": {
"file": "fs/binfmt_elf.c",
"function": "load_elf_binary"
},
"id": "CVE-2024-46826-6153fe1e",
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"110756040155446661638399153056351922469",
"152138396750815713208195591315959751465",
"224872104627714088050776442538268639789",
"216910388039031525444682546449373662737",
"320601371872762193432274124572660750983",
"21811402781213417879013681892133927946",
"232539321343181812043336889885927774477",
"102917838056295199038606580469264748510"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@53f17409abf61f66b6f05aff795e938e5ba811d1",
"target": {
"file": "fs/binfmt_elf.c"
},
"id": "CVE-2024-46826-cd7f6639",
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"digest": {
"function_hash": "293912714272328755670471013608547596701",
"length": 7457.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@53f17409abf61f66b6f05aff795e938e5ba811d1",
"target": {
"file": "fs/binfmt_elf.c",
"function": "load_elf_binary"
},
"id": "CVE-2024-46826-d6974871",
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"digest": {
"function_hash": "164287217632141410217506787280456050632",
"length": 7337.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2a97388a807b6ab5538aa8f8537b2463c6988bd2",
"target": {
"file": "fs/binfmt_elf.c",
"function": "load_elf_binary"
},
"id": "CVE-2024-46826-dd88a93e",
"signature_type": "Function",
"signature_version": "v1"
}
]