CVE - CVE-2024-26710

CVE-ID
CVE-2024-26710	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: powerpc/kasan: Limit KASAN thread size increase to 32KB KASAN is seen to increase stack usage, to the point that it was reported to lead to stack overflow on some 32-bit machines (see link). To avoid overflows the stack size was doubled for KASAN builds in commit 3e8635fb2e07 ("powerpc/kasan: Force thread size increase with KASAN"). However with a 32KB stack size to begin with, the doubling leads to a 64KB stack, which causes build errors: arch/powerpc/kernel/switch.S:249: Error: operand out of range (0x000000000000fe50 is not between 0xffffffffffff8000 and 0x0000000000007fff) Although the asm could be reworked, in practice a 32KB stack seems sufficient even for KASAN builds - the additional usage seems to be in the 2-3KB range for a 64-bit KASAN build. So only increase the stack for KASAN if the stack size is < 32KB.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/4297217bcf1f0948a19c2bacc6b68d92e7778ad9 URL:https://git.kernel.org/stable/c/4297217bcf1f0948a19c2bacc6b68d92e7778ad9 MISC:https://git.kernel.org/stable/c/4cc31fa07445879a13750cb061bb8c2654975fcb URL:https://git.kernel.org/stable/c/4cc31fa07445879a13750cb061bb8c2654975fcb MISC:https://git.kernel.org/stable/c/b29b16bd836a838b7690f80e37f8376414c74cbe URL:https://git.kernel.org/stable/c/b29b16bd836a838b7690f80e37f8376414c74cbe MISC:https://git.kernel.org/stable/c/f1acb109505d983779bbb7e20a1ee6244d2b5736 URL:https://git.kernel.org/stable/c/f1acb109505d983779bbb7e20a1ee6244d2b5736
Assigning CNA
kernel.org
Date Record Created
20240219	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240219)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)