Medium 5.5Published Apr 10, 2024

CVE-2024-26816x86, relocs: Ignore relocations in .notes section

Updated under an hour ago (Oct 28, 2026, 4:20 AM ET)

Does this affect you?

It affects Linux and 3 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: x86, relocs: Ignore relocations in .notes section When building with CONFIG_XEN_PV=y, .text symbols are emitted into the .notes section so that Xen can find the "startup_xen" entry point. This information is used prior to booting the kernel, so relocations are not useful. In fact, performing relocations against the .notes section means that the KASLR base is exposed since /sys/kernel/notes is world-readable. To avoid leaking the KASLR base without breaking unprivileged tools that are expecting to read /sys/kernel/notes, skip performing relocations in the .notes section. The values readable in .notes are then identical to those found in System.map.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 5ead97c84fa7d63a6a7a2f4e9f18f452bd109045 before 13edb509abc91c72152a11baaf0e7c060a312e03; from 5ead97c84fa7d63a6a7a2f4e9f18f452bd109045 before 52018aa146e3cf76569a9b1e6e49a2b7c8d4a088; from 5ead97c84fa7d63a6a7a2f4e9f18f452bd109045 before a4e7ff1a74274e59a2de9bb57236542aa990d20a; from 5ead97c84fa7d63a6a7a2f4e9f18f452bd109045 before c7cff9780297d55d97ad068b68b703cfe53ef9af; from 5ead97c84fa7d63a6a7a2f4e9f18f452bd109045 before 47635b112a64b7b208224962471e7e42f110e723; from 5ead97c84fa7d63a6a7a2f4e9f18f452bd109045 before af2a9f98d884205145fd155304a6955822ccca1c; from 5ead97c84fa7d63a6a7a2f4e9f18f452bd109045 before ae7079238f6faf1b94accfccf334e98b46a0c0aa; 5ead97c84fa7d63a6a7a2f4e9f18f452bd109045 builds before 5cb59db49c9c0fccfd33b2209af4f7ae3c6ddf40; and 1 more ranges	CNA record
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1.1	CISA ADP
linux linux_kernel linux:linux_kernel	from 2.6.23 before 4.19.311; from 4.20 before 5.4.273; from 5.5 before 5.10.214; from 5.11 before 5.15.153; from 5.16 before 6.1.83; from 6.2 before 6.6.23; from 6.7 before 6.7.11; from 6.8 before 6.8.2; and 1 more ranges	NVD
debian debian_linux debian:debian_linux	10.0	NVD

References

References

https://git.kernel.org/stable/c/13edb509abc91c72152a11baaf0e7c060a312e03	patch
https://git.kernel.org/stable/c/52018aa146e3cf76569a9b1e6e49a2b7c8d4a088	patch
https://git.kernel.org/stable/c/a4e7ff1a74274e59a2de9bb57236542aa990d20a	patch
https://git.kernel.org/stable/c/c7cff9780297d55d97ad068b68b703cfe53ef9af	patch
https://git.kernel.org/stable/c/47635b112a64b7b208224962471e7e42f110e723	patch
https://git.kernel.org/stable/c/af2a9f98d884205145fd155304a6955822ccca1c	patch
https://git.kernel.org/stable/c/ae7079238f6faf1b94accfccf334e98b46a0c0aa	patch
https://git.kernel.org/stable/c/5cb59db49c9c0fccfd33b2209af4f7ae3c6ddf40	patch
https://git.kernel.org/stable/c/aaa8736370db1a78f0e8434344a484f9fd20be3b	patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html	mailing-list
1–10 of 12

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.