In the Linux kernel, the following vulnerability has been resolved:
powerpc/kasan: Limit KASAN thread size increase to 32KB
KASAN is seen to increase stack usage, to the point that it was reported to lead to stack overflow on some 32-bit machines (see link).
To avoid overflows the stack size was doubled for KASAN builds in commit 3e8635fb2e07 ("powerpc/kasan: Force thread size increase with KASAN").
However with a 32KB stack size to begin with, the doubling leads to a 64KB stack, which causes build errors: arch/powerpc/kernel/switch.S:249: Error: operand out of range (0x000000000000fe50 is not between 0xffffffffffff8000 and 0x0000000000007fff)
Although the asm could be reworked, in practice a 32KB stack seems sufficient even for KASAN builds - the additional usage seems to be in the 2-3KB range for a 64-bit KASAN build.
So only increase the stack for KASAN if the stack size is < 32KB.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 3, 2024 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade kernel-macrosUpgrade kernel-default-vdsoUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade kernel-azure-vdsoUpgrade kernel-default-extraUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade kernel-docs-htmlUpgrade kernel-source-vanillaUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-extra | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-awsUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-starfiveUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-oracle-64kUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-6.5Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-1027-oemUpgrade linux-image-gcpUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-generic-hwe-22.04 | Jul 15, 2024 | Apr 3, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub