Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Qun-Wei Lin

Researcher fromMediatek
#45081of 53,632
5.5Total CVSS
Vulnerabilities · 1
PT-2024-35594
5.5
2024-11-15
Linux · Linux Kernel · CVE-2024-53128
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 6.11.9 **Description** The issue is related to the `object is on stack()` function in the Linux kernel, which may produce incorrect results when `CONFIG KASAN SW TAGS` and `CONFIG KASAN STACK` are enabled. This discrepancy can lead to incorrect stack object detection and trigger warnings if `CONFIG DEBUG OBJECTS` is also enabled. The problem arises due to the presence of tags in the `obj` pointer, while the stack pointer does not have tags. **Recommendations** To resolve the issue, upgrade the Linux kernel to a version newer than 6.11.9. For Linux kernel versions prior to 6.11.9, consider disabling `CONFIG KASAN SW TAGS` and `CONFIG KASAN STACK` as a temporary workaround until a patch is available.