-
CVE-2026-53346
- EPSS 0.16%
- Veröffentlicht 01.07.2026 13:32:25
- Zuletzt bearbeitet 01.07.2026 14:16:42
- Quelle 416baaa9-dc9f-4396-8d5f-8c081f
- CVE-Watchlists
- Unerledigt
rust: arm64: set uwtable llvm module flag for CONFIG_UNWIND_TABLES
In the Linux kernel, the following vulnerability has been resolved:
rust: arm64: set uwtable llvm module flag for CONFIG_UNWIND_TABLES
Due to a rustc bug [1] the -Cforce-unwind-tables=y flag only emits the
uwtable annotation for functions, but not for the module. This means
that compiler-generated functions such as 'asan.module_ctor' do not
receive the uwtable annotation.
When CONFIG_UNWIND_PATCH_PAC_INTO_SCS is enabled, this leads to boot
failures because the dwarf information emitted for the kasan
constructors is wrong, which causes the SCS boot patching code to
patch the constructor in an illegal manner. Specifically, the paciasp
instruction is patched, but the autiasp instruction is not. This
mismatch leads to a crash when the constructor is called during boot.
==================================================================
BUG: KASAN: global-out-of-bounds in do_basic_setup+0x4c/0x90
Read of size 8 at addr ffffffe3cc7eb488 by task swapper/0/1
Specifically the faulting instruction is the (*fn)() to invoke the
constructor in do_ctors() of the init/main.c file.
Once the fix lands in rustc, this flag can be made conditional on the
rustc version. Note that passing the flag on a rustc with the fix
present has no effect.
[ The fix [1] has landed for Rust 1.98.0 (expected release on
2026-08-20).
Thus add a version check as discussed.
- Miguel ]
[ Adjusted link and comment. - Miguel ]Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt
Linux
Default Statusunaffected
Version
d077242d68a31075ef5f5da041bf8f6fc19aa231
Version <
bde772ee239720af216fb0b14753971059e132dc
Status
affected
Version
d077242d68a31075ef5f5da041bf8f6fc19aa231
Version <
d0f25a1755f2c15b1746379c8d9d7dfde85f58f5
Status
affected
Version
d077242d68a31075ef5f5da041bf8f6fc19aa231
Version <
7de13410f59e59b21d3c268a6e22d40f5d9d8a54
Status
affected
Version
d077242d68a31075ef5f5da041bf8f6fc19aa231
Version <
ac35b5580ace12e5d0a0b5e61e36d2c4e1ffa29c
Status
affected
HerstellerLinux
≫
Produkt
Linux
Default Statusaffected
Version
6.12
Status
affected
Version
0
Version <
6.12
Status
unaffected
Version <=
6.12.*
Version
6.12.94
Status
unaffected
Version <=
6.18.*
Version
6.18.36
Status
unaffected
Version <=
7.0.*
Version
7.0.13
Status
unaffected
Version <=
*
Version
7.1
Status
unaffected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.16% | 0.052 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|
https://git.kernel.org/stable/c/bde772ee239720af216fb0b14753971059e132dc
https://git.kernel.org/stable/c/d0f25a1755f2c15b1746379c8d9d7dfde85f58f5
https://git.kernel.org/stable/c/7de13410f59e59b21d3c268a6e22d40f5d9d8a54
https://git.kernel.org/stable/c/ac35b5580ace12e5d0a0b5e61e36d2c4e1ffa29c