In the Linux kernel, the following vulnerability has been resolved:
powerpc/kasan: Limit KASAN thread size increase to 32KB
KASAN is seen to increase stack usage, to the point that it was reported to lead to stack overflow on some 32-bit machines (see link).
To avoid overflows the stack size was doubled for KASAN builds in commit 3e8635fb2e07 ("powerpc/kasan: Force thread size increase with KASAN").
However with a 32KB stack size to begin with, the doubling leads to a 64KB stack, which causes build errors: arch/powerpc/kernel/switch.S:249: Error: operand out of range (0x000000000000fe50 is not between 0xffffffffffff8000 and 0x0000000000007fff)
Although the asm could be reworked, in practice a 32KB stack seems sufficient even for KASAN builds - the additional usage seems to be in the 2-3KB range for a 64-bit KASAN build.
So only increase the stack for KASAN if the stack size is < 32KB.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 3, 2024 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade kernel-azure-vdsoUpgrade kernel-default-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-default-livepatchUpgrade kernel-symsUpgrade kernel-default-extra | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-oracle-64kUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-azureUpgrade linux-image-nvidia-6.5Upgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-1023-awsUpgrade linux-image-starfive | Jul 15, 2024 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub