powerpc/kasan: Limit KASAN thread size increase to 32KB (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.24 % · percentile 16 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Modified
Description
In the Linux kernel, the following vulnerability has been resolved: powerpc/kasan: Limit KASAN thread size increase to 32KB KASAN is seen to increase stack usage, to the point that it was reported to lead to stack overflow on some 32-bit machines (see link). To avoid overflows the stack size was doubled for KASAN builds in commit 3e8635fb2e07 ("powerpc/kasan: Force thread size increase with KASAN"). However with a 32KB stack size to begin with, the doubling leads to a 64KB stack, which causes build errors: arch/powerpc/kernel/switch.S:249: Error: operand out of range (0x000000000000fe50 is not between 0xffffffffffff8000 and 0x0000000000007fff) Although the asm could be reworked, in practice a 32KB stack seems sufficient even for KASAN builds - the additional usage seems to be in the 2-3KB range for a 64-bit KASAN build. So only increase the stack for KASAN if the stack size is < 32KB.
Weaknesses (CWE)
- CWE-770 — Allocation of Resources Without Limits or Throttling
References
- https://git.kernel.org/stable/c/f9a4c401bf4c5af3437ad221c0a5880a518068d4
- https://git.kernel.org/stable/c/4cc31fa07445879a13750cb061bb8c2654975fcb
- https://git.kernel.org/stable/c/b29b16bd836a838b7690f80e37f8376414c74cbe
- https://git.kernel.org/stable/c/f1acb109505d983779bbb7e20a1ee6244d2b5736
- https://git.kernel.org/stable/c/4297217bcf1f0948a19c2bacc6b68d92e7778ad9
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2024-23972
- GCVE · GCVE-0-2024-26710
CERT-FR advisories
- CERTFR-2024-AVI-0958 — Multiples vulnérabilités dans les produits IBM · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0667 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0633 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0611 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0334 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.1.75 < 6.1.79cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.6.14 < 6.6.18cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.7.2 < 6.7.6
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 9ccf64e763aca088b0d25c1274af42b1a6a45135 < f9a4c401bf4c5af3437ad221c0a5880a518068d4 ; affected b38014874530d3776de75679315e8c1fe04aa89b < 4cc31fa07445879a13750cb061bb8c2654975fcb ; affected 58f396513cb1fa4ef91838c78698d458100cc27c < b29b16bd836a838b7690f80e37f8376414c74cbe ; affected 18f14afe281648e31ed35c9ad2fcb724c4838ad9 < f1acb109505d983779bbb7e20a1ee6244d2b5736 |
| Linux · Linux | affected 6.1.75 < 6.1.76 ; affected 6.6.14 < 6.6.18 ; affected 6.7.2 < 6.7.6 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |