Stack Protection Vulnerability in Linux Kernel by Linux Foundation

CVE-2023-53491

What is CVE-2023-53491?

A vulnerability has been identified in the Linux Kernel related to the stack protection feature, specifically the omission of stack protectors on a per-function basis. The issue arose when callers of the 'boot_init_stack_canary' function did not appropriately utilize the function attribute 'no_stack_protector.' This oversight can result in discrepancies in the canary stored in the stack slot of the caller leading to potential security risks. With the introduction of GCC-11, which supports the necessary function attribute, it's crucial for developers to ensure their implementations utilize this feature to maintain security integrity.

References