CVE-2024-26710: powerpc/kasan: Limit KASAN thread size increase to 32KB
In the Linux kernel, the following vulnerability has been resolved:
powerpc/kasan: Limit KASAN thread size increase to 32KB
KASAN is seen to increase stack usage, to the point that it was reported to lead to stack overflow on some 32-bit machines (see link).
To avoid overflows the stack size was doubled for KASAN builds in commit 3e8635fb2e07 ("powerpc/kasan: Force thread size increase with KASAN").
However with a 32KB stack size to begin with, the doubling leads to a 64KB stack, which causes build errors: arch/powerpc/kernel/switch.S:249: Error: operand out of range (0x000000000000fe50 is not between 0xffffffffffff8000 and 0x0000000000007fff)
Although the asm could be reworked, in practice a 32KB stack seems sufficient even for KASAN builds - the additional usage seems to be in the 2-3KB range for a 64-bit KASAN build.
So only increase the stack for KASAN if the stack size is < 32KB.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26710?
CVE-2024-26710 is classified as a moderate severity vulnerability due to potential stack overflow risks on certain 32-bit machines.
How do I fix CVE-2024-26710?
To fix CVE-2024-26710, upgrade your Linux kernel to one of the secure versions such as 5.10.223-1, 6.1.123-1, or later.
What impact does CVE-2024-26710 have on my system?
The impact of CVE-2024-26710 may include stack overflows, which can lead to application crashes or unexpected behavior on affected 32-bit systems.
Which Linux kernel versions are vulnerable to CVE-2024-26710?
Kernel versions prior to the fixes, specifically those below 5.10.223-1 and 6.1.119-1, are vulnerable to CVE-2024-26710.
Is CVE-2024-26710 specific to any hardware architecture?
Yes, CVE-2024-26710 primarily affects the powerpc architecture within the Linux kernel.