GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2024-26710 (GCVE-0-2024-26710)

Vulnerability from cvelistv5 – Published: 2024-04-03 14:55 – Updated: 2026-05-11 20:02
VLAI
Title
powerpc/kasan: Limit KASAN thread size increase to 32KB
Summary
In the Linux kernel, the following vulnerability has been resolved: powerpc/kasan: Limit KASAN thread size increase to 32KB KASAN is seen to increase stack usage, to the point that it was reported to lead to stack overflow on some 32-bit machines (see link). To avoid overflows the stack size was doubled for KASAN builds in commit 3e8635fb2e07 ("powerpc/kasan: Force thread size increase with KASAN"). However with a 32KB stack size to begin with, the doubling leads to a 64KB stack, which causes build errors: arch/powerpc/kernel/switch.S:249: Error: operand out of range (0x000000000000fe50 is not between 0xffffffffffff8000 and 0x0000000000007fff) Although the asm could be reworked, in practice a 32KB stack seems sufficient even for KASAN builds - the additional usage seems to be in the 2-3KB range for a 64-bit KASAN build. So only increase the stack for KASAN if the stack size is < 32KB.
Severity
No CVSS data available.
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-04-03 17:38 UTC
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 9ccf64e763aca088b0d25c1274af42b1a6a45135 , < f9a4c401bf4c5af3437ad221c0a5880a518068d4 (git)
Affected: b38014874530d3776de75679315e8c1fe04aa89b , < 4cc31fa07445879a13750cb061bb8c2654975fcb (git)
Affected: 58f396513cb1fa4ef91838c78698d458100cc27c , < b29b16bd836a838b7690f80e37f8376414c74cbe (git)
Affected: 18f14afe281648e31ed35c9ad2fcb724c4838ad9 , < f1acb109505d983779bbb7e20a1ee6244d2b5736 (git)
guessed Create a notification for this product.
Linux Linux Affected: 6.1.75 , < 6.1.76 (semver)
Affected: 6.6.14 , < 6.6.18 (semver)
Affected: 6.7.2 , < 6.7.6 (semver)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-26710",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-04-03T17:38:18.725321Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-06T19:09:54.006Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T00:14:12.978Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/4297217bcf1f0948a19c2bacc6b68d92e7778ad9"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/4cc31fa07445879a13750cb061bb8c2654975fcb"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/b29b16bd836a838b7690f80e37f8376414c74cbe"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/f1acb109505d983779bbb7e20a1ee6244d2b5736"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "arch/powerpc/include/asm/thread_info.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "f9a4c401bf4c5af3437ad221c0a5880a518068d4",
              "status": "affected",
              "version": "9ccf64e763aca088b0d25c1274af42b1a6a45135",
              "versionType": "git"
            },
            {
              "lessThan": "4cc31fa07445879a13750cb061bb8c2654975fcb",
              "status": "affected",
              "version": "b38014874530d3776de75679315e8c1fe04aa89b",
              "versionType": "git"
            },
            {
              "lessThan": "b29b16bd836a838b7690f80e37f8376414c74cbe",
              "status": "affected",
              "version": "58f396513cb1fa4ef91838c78698d458100cc27c",
              "versionType": "git"
            },
            {
              "lessThan": "f1acb109505d983779bbb7e20a1ee6244d2b5736",
              "status": "affected",
              "version": "18f14afe281648e31ed35c9ad2fcb724c4838ad9",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "arch/powerpc/include/asm/thread_info.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "6.1.76",
              "status": "affected",
              "version": "6.1.75",
              "versionType": "semver"
            },
            {
              "lessThan": "6.6.18",
              "status": "affected",
              "version": "6.6.14",
              "versionType": "semver"
            },
            {
              "lessThan": "6.7.6",
              "status": "affected",
              "version": "6.7.2",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.76",
                  "versionStartIncluding": "6.1.75",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.18",
                  "versionStartIncluding": "6.6.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.7.6",
                  "versionStartIncluding": "6.7.2",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/kasan: Limit KASAN thread size increase to 32KB\n\nKASAN is seen to increase stack usage, to the point that it was reported\nto lead to stack overflow on some 32-bit machines (see link).\n\nTo avoid overflows the stack size was doubled for KASAN builds in\ncommit 3e8635fb2e07 (\"powerpc/kasan: Force thread size increase with\nKASAN\").\n\nHowever with a 32KB stack size to begin with, the doubling leads to a\n64KB stack, which causes build errors:\n  arch/powerpc/kernel/switch.S:249: Error: operand out of range (0x000000000000fe50 is not between 0xffffffffffff8000 and 0x0000000000007fff)\n\nAlthough the asm could be reworked, in practice a 32KB stack seems\nsufficient even for KASAN builds - the additional usage seems to be in\nthe 2-3KB range for a 64-bit KASAN build.\n\nSo only increase the stack for KASAN if the stack size is \u003c 32KB."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T20:02:41.007Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/f9a4c401bf4c5af3437ad221c0a5880a518068d4"
        },
        {
          "url": "https://git.kernel.org/stable/c/4cc31fa07445879a13750cb061bb8c2654975fcb"
        },
        {
          "url": "https://git.kernel.org/stable/c/b29b16bd836a838b7690f80e37f8376414c74cbe"
        },
        {
          "url": "https://git.kernel.org/stable/c/f1acb109505d983779bbb7e20a1ee6244d2b5736"
        }
      ],
      "title": "powerpc/kasan: Limit KASAN thread size increase to 32KB",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-26710",
    "datePublished": "2024-04-03T14:55:12.583Z",
    "dateReserved": "2024-02-19T14:20:24.159Z",
    "dateUpdated": "2026-05-11T20:02:41.007Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-26710",
      "date": "2026-09-15",
      "epss": "0.00245",
      "percentile": "0.15913"
    },
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\npowerpc/kasan: Limit KASAN thread size increase to 32KB\\n\\nKASAN is seen to increase stack usage, to the point that it was reported\\nto lead to stack overflow on some 32-bit machines (see link).\\n\\nTo avoid overflows the stack size was doubled for KASAN builds in\\ncommit 3e8635fb2e07 (\\\"powerpc/kasan: Force thread size increase with\\nKASAN\\\").\\n\\nHowever with a 32KB stack size to begin with, the doubling leads to a\\n64KB stack, which causes build errors:\\n  arch/powerpc/kernel/switch.S:249: Error: operand out of range (0x000000000000fe50 is not between 0xffffffffffff8000 and 0x0000000000007fff)\\n\\nAlthough the asm could be reworked, in practice a 32KB stack seems\\nsufficient even for KASAN builds - the additional usage seems to be in\\nthe 2-3KB range for a 64-bit KASAN build.\\n\\nSo only increase the stack for KASAN if the stack size is \u003c 32KB.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se resolvi\\u00f3 la siguiente vulnerabilidad: powerpc/kasan: limitar el aumento del tama\\u00f1o del subproceso KASAN a 32 KB. Se considera que KASAN aumenta el uso de la pila, hasta el punto de que se inform\\u00f3 que provoca un desbordamiento de la pila en algunas m\\u00e1quinas de 32 bits ( ver enlace). Para evitar desbordamientos, el tama\\u00f1o de la pila se duplic\\u00f3 para las compilaciones de KASAN en el commit 3e8635fb2e07 (\\\"powerpc/kasan: Forzar el aumento del tama\\u00f1o del subproceso con KASAN\\\"). Sin embargo, con un tama\\u00f1o de pila de 32 KB para empezar, la duplicaci\\u00f3n conduce a una pila de 64 KB, lo que provoca errores de compilaci\\u00f3n: arch/powerpc/kernel/switch.S:249: Error: operando fuera de rango (0x000000000000fe50 no est\\u00e1 entre 0xffffffffffff8000 y 0x00000000000007fff) Aunque el conjunto podr\\u00eda modificarse, en la pr\\u00e1ctica una pila de 32 KB parece suficiente incluso para compilaciones KASAN; el uso adicional parece estar en el rango de 2 a 3 KB para una compilaci\\u00f3n KASAN de 64 bits. Por lo tanto, solo aumente la pila para KASAN si el tama\\u00f1o de la pila es \u0026lt;32 KB.\"}]",
      "id": "CVE-2024-26710",
      "lastModified": "2024-11-21T09:02:53.723",
      "published": "2024-04-03T15:15:53.487",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/4297217bcf1f0948a19c2bacc6b68d92e7778ad9\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/4cc31fa07445879a13750cb061bb8c2654975fcb\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/b29b16bd836a838b7690f80e37f8376414c74cbe\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/f1acb109505d983779bbb7e20a1ee6244d2b5736\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/4297217bcf1f0948a19c2bacc6b68d92e7778ad9\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/4cc31fa07445879a13750cb061bb8c2654975fcb\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/b29b16bd836a838b7690f80e37f8376414c74cbe\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/f1acb109505d983779bbb7e20a1ee6244d2b5736\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Awaiting Analysis"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-26710\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-04-03T15:15:53.487\",\"lastModified\":\"2026-06-17T07:18:09.263\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\npowerpc/kasan: Limit KASAN thread size increase to 32KB\\n\\nKASAN is seen to increase stack usage, to the point that it was reported\\nto lead to stack overflow on some 32-bit machines (see link).\\n\\nTo avoid overflows the stack size was doubled for KASAN builds in\\ncommit 3e8635fb2e07 (\\\"powerpc/kasan: Force thread size increase with\\nKASAN\\\").\\n\\nHowever with a 32KB stack size to begin with, the doubling leads to a\\n64KB stack, which causes build errors:\\n  arch/powerpc/kernel/switch.S:249: Error: operand out of range (0x000000000000fe50 is not between 0xffffffffffff8000 and 0x0000000000007fff)\\n\\nAlthough the asm could be reworked, in practice a 32KB stack seems\\nsufficient even for KASAN builds - the additional usage seems to be in\\nthe 2-3KB range for a 64-bit KASAN build.\\n\\nSo only increase the stack for KASAN if the stack size is \u003c 32KB.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: powerpc/kasan: limitar el aumento del tama\u00f1o del subproceso KASAN a 32 KB. Se considera que KASAN aumenta el uso de la pila, hasta el punto de que se inform\u00f3 que provoca un desbordamiento de la pila en algunas m\u00e1quinas de 32 bits ( ver enlace). Para evitar desbordamientos, el tama\u00f1o de la pila se duplic\u00f3 para las compilaciones de KASAN en el commit 3e8635fb2e07 (\\\"powerpc/kasan: Forzar el aumento del tama\u00f1o del subproceso con KASAN\\\"). Sin embargo, con un tama\u00f1o de pila de 32 KB para empezar, la duplicaci\u00f3n conduce a una pila de 64 KB, lo que provoca errores de compilaci\u00f3n: arch/powerpc/kernel/switch.S:249: Error: operando fuera de rango (0x000000000000fe50 no est\u00e1 entre 0xffffffffffff8000 y 0x00000000000007fff) Aunque el conjunto podr\u00eda modificarse, en la pr\u00e1ctica una pila de 32 KB parece suficiente incluso para compilaciones KASAN; el uso adicional parece estar en el rango de 2 a 3 KB para una compilaci\u00f3n KASAN de 64 bits. Por lo tanto, solo aumente la pila para KASAN si el tama\u00f1o de la pila es \u0026lt;32 KB.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"arch/powerpc/include/asm/thread_info.h\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"9ccf64e763aca088b0d25c1274af42b1a6a45135\",\"lessThan\":\"f9a4c401bf4c5af3437ad221c0a5880a518068d4\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"b38014874530d3776de75679315e8c1fe04aa89b\",\"lessThan\":\"4cc31fa07445879a13750cb061bb8c2654975fcb\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"58f396513cb1fa4ef91838c78698d458100cc27c\",\"lessThan\":\"b29b16bd836a838b7690f80e37f8376414c74cbe\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"18f14afe281648e31ed35c9ad2fcb724c4838ad9\",\"lessThan\":\"f1acb109505d983779bbb7e20a1ee6244d2b5736\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"arch/powerpc/include/asm/thread_info.h\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.1.75\",\"lessThan\":\"6.1.76\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.6.14\",\"lessThan\":\"6.6.18\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.7.2\",\"lessThan\":\"6.7.6\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-04-03T17:38:18.725321Z\",\"id\":\"CVE-2024-26710\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-770\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.1.75\",\"versionEndExcluding\":\"6.1.79\",\"matchCriteriaId\":\"E45DC1AD-08BC-4CC1-A959-E47949DF8C4D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.6.14\",\"versionEndExcluding\":\"6.6.18\",\"matchCriteriaId\":\"D414D75C-C82B-4167-B493-0F5458C4D8FC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7.2\",\"versionEndExcluding\":\"6.7.6\",\"matchCriteriaId\":\"B739F4F8-3AC5-4589-83F6-43218BC20877\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/4cc31fa07445879a13750cb061bb8c2654975fcb\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b29b16bd836a838b7690f80e37f8376414c74cbe\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f1acb109505d983779bbb7e20a1ee6244d2b5736\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f9a4c401bf4c5af3437ad221c0a5880a518068d4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/4297217bcf1f0948a19c2bacc6b68d92e7778ad9\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/4cc31fa07445879a13750cb061bb8c2654975fcb\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b29b16bd836a838b7690f80e37f8376414c74cbe\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f1acb109505d983779bbb7e20a1ee6244d2b5736\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2025-11-21T13:42:10+00:00",
      "cve": "CVE-2024-26710",
      "id": "CVE-2024-26710",
      "initial_release_date": "2024-04-03T00:00:00+00:00",
      "product_status:known_not_affected": "198",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: powerpc/kasan: Limit KASAN thread size increase to 32KB",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-26710.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-02T01:34:32Z",
      "cve": "CVE-2024-26710",
      "id": "CVE-2024-26710",
      "initial_release_date": "2024-04-09T02:29:09Z",
      "product_status:known_not_affected": "364",
      "product_status:recommended": "202",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2024-26710",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-26710.json",
      "version": "36"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/4297217bcf1f0948a19c2bacc6b68d92e7778ad9\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/4cc31fa07445879a13750cb061bb8c2654975fcb\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/b29b16bd836a838b7690f80e37f8376414c74cbe\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/f1acb109505d983779bbb7e20a1ee6244d2b5736\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T00:14:12.978Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-26710\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-04-03T17:38:18.725321Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-06-06T19:09:51.620Z\"}}], \"cna\": {\"title\": \"powerpc/kasan: Limit KASAN thread size increase to 32KB\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"9ccf64e763aca088b0d25c1274af42b1a6a45135\", \"lessThan\": \"f9a4c401bf4c5af3437ad221c0a5880a518068d4\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"b38014874530d3776de75679315e8c1fe04aa89b\", \"lessThan\": \"4cc31fa07445879a13750cb061bb8c2654975fcb\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"58f396513cb1fa4ef91838c78698d458100cc27c\", \"lessThan\": \"b29b16bd836a838b7690f80e37f8376414c74cbe\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"18f14afe281648e31ed35c9ad2fcb724c4838ad9\", \"lessThan\": \"f1acb109505d983779bbb7e20a1ee6244d2b5736\", \"versionType\": \"git\"}], \"programFiles\": [\"arch/powerpc/include/asm/thread_info.h\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.1.75\", \"lessThan\": \"6.1.76\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"6.6.14\", \"lessThan\": \"6.6.18\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"6.7.2\", \"lessThan\": \"6.7.6\", \"versionType\": \"semver\"}], \"programFiles\": [\"arch/powerpc/include/asm/thread_info.h\"], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/f9a4c401bf4c5af3437ad221c0a5880a518068d4\"}, {\"url\": \"https://git.kernel.org/stable/c/4cc31fa07445879a13750cb061bb8c2654975fcb\"}, {\"url\": \"https://git.kernel.org/stable/c/b29b16bd836a838b7690f80e37f8376414c74cbe\"}, {\"url\": \"https://git.kernel.org/stable/c/f1acb109505d983779bbb7e20a1ee6244d2b5736\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\npowerpc/kasan: Limit KASAN thread size increase to 32KB\\n\\nKASAN is seen to increase stack usage, to the point that it was reported\\nto lead to stack overflow on some 32-bit machines (see link).\\n\\nTo avoid overflows the stack size was doubled for KASAN builds in\\ncommit 3e8635fb2e07 (\\\"powerpc/kasan: Force thread size increase with\\nKASAN\\\").\\n\\nHowever with a 32KB stack size to begin with, the doubling leads to a\\n64KB stack, which causes build errors:\\n  arch/powerpc/kernel/switch.S:249: Error: operand out of range (0x000000000000fe50 is not between 0xffffffffffff8000 and 0x0000000000007fff)\\n\\nAlthough the asm could be reworked, in practice a 32KB stack seems\\nsufficient even for KASAN builds - the additional usage seems to be in\\nthe 2-3KB range for a 64-bit KASAN build.\\n\\nSo only increase the stack for KASAN if the stack size is \u003c 32KB.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.76\", \"versionStartIncluding\": \"6.1.75\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.18\", \"versionStartIncluding\": \"6.6.14\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.7.6\", \"versionStartIncluding\": \"6.7.2\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-05-11T20:02:41.007Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-26710\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-11T20:02:41.007Z\", \"dateReserved\": \"2024-02-19T14:20:24.159Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-04-03T14:55:12.583Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.