PT-2024-32228 · Linux+10 · Linux Kernel+10

Alexey Dobriyan · Published 2024-06-21 · Updated 2026-03-14 · CVE-2024-46826

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The ELF loader in the Linux kernel uses the randomize va space sysctl twice, which can change at any moment, potentially leading to unpredictable consequences if two loads see different values. The issue has been resolved by ensuring exactly one load for a consistent value across one exec.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALSA-2024:8856

ALSA-2024:8870

ALSA-2025_16880

AZL-53327

BDU:2025-03256

CESA-2024_8856

CESA-2024_8870

CVE-2024-46826

DLA-4008-1

DSA-5782-1

INFSA-2024_8856

INFSA-2024_8870

INFSA-2025_4341

OESA-2024-2255

OESA-2024-2258

OESA-2024-2294

OESA-2024-2295

OESA-2024-2296

OPENSUSE-SU-2024_3587-1

OPENSUSE-SU-2024_3984-1

OPENSUSE-SU-2024_3985-1

OPENSUSE-SU-2024_3986-1

RHSA-2024:8856

RHSA-2024:8870

RHSA-2024_8856

RHSA-2024_8870

RHSA-2025:10701

RHSA-2025:4341

RHSA-2025_4341

RLSA-2024:8856

RLSA-2024:8870

SUSE-SU-2024:3587-1

SUSE-SU-2024:3984-1

SUSE-SU-2024:3985-1

SUSE-SU-2024:3986-1

SUSE-SU-2024:4100-1

SUSE-SU-2024:4318-1

SUSE-SU-2024:4364-1

SUSE-SU-2024:4387-1

SUSE-SU-2025:0034-1

SUSE-SU-2025:20163-1

SUSE-SU-2025:20164-1

SUSE-SU-2025:20246-1

SUSE-SU-2025:20247-1

USN-7154-1

USN-7154-2

USN-7155-1

USN-7156-1

USN-7196-1

USN-7428-1

USN-7428-2

USN-7429-1

USN-7429-2

USN-7455-1

USN-7455-2

USN-7455-3

USN-7455-4

USN-7455-5

USN-7459-1

USN-7459-2

USN-7460-1

USN-7461-1

USN-7461-2

USN-7461-3

USN-7462-1

USN-7462-2

USN-7463-1

USN-7475-1

USN-7539-1

USN-7540-1

Affected Products

Almalinux

Astra Linux

Centos

Debian

Linuxmint

Linux Kernel

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 3159

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46826.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-42229 · Security Note
• https://ubuntu.com/security/CVE-2024-46705 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21666 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41097 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-53161 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42126 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-43876 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42092 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-52332 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57910 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35958 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7459-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-43840 · Security Note
• https://ubuntu.com/security/CVE-2024-46720 · Vendor Advisory