A cryptographic low entropy vulnerability was found in the Linux kernel, where the kstack_offset variable only uses the low bits for kernel stack offset entropy. This issue can result in loss of overall security of the system.

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

In the Linux kernel, the following vulnerability has been resolved: randomize_kstack: Improve entropy diffusion The kstack_offset variable was really only ever using the low bits for kernel stack offset entropy. Add a ror32() to increase bit diffusion.

ELSA-2024-9315: kernel security update (MODERATE)