CVE-2026-98917 (GCVE-0-2026-98917)
Vulnerability from cvelistv5
Published
2026-10-23 12:01
Modified
2026-10-26 06:56
Severity ?
VLAI Severity ?
EPSS score ?
Summary
In the Linux kernel, the following vulnerability has been resolved:
parisc: Increase kernel stack size to 32kb
For 64-bit Linux kernels, increase the default kernel stack size
(THREAD_SIZE_ORDER) to 32 kB, in order to avoid kernel crashes which have been
triggered recently when building the debian vtk9 package with gcc 17:
stackcheck: kworker/u128:0 will most likely overflow kernel stack (sp:179a83af0, stk bottom-top:179a80000-179a84000)
Kernel panic - not syncing: low stack detected by irq handler - check messages
CPU: 2 UID: 0 PID: 30760 Comm: kworker/u128:0 Tainted: G W 6.18.46-dirty #1 NONE
Tainted: [W]=WARN
Hardware name: 9000/800/rp3440
Workqueue: writeback wb_workfn (flush-259:0)
Backtrace:
[<000000004022f050>] show_stack+0x70/0x90
[<000000004022378c>] dump_stack_lvl+0x124/0x190
[<000000004022382c>] dump_stack+0x34/0x48
[<000000004020212c>] vpanic+0x204/0x648
[<00000000402025c4>] panic+0x54/0x58
[<0000000040232230>] do_cpu_irq_mask+0x3f8/0x440
[<0000000040227070>] intr_return+0x0/0xc
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Linux",
"programFiles": [
"arch/parisc/include/asm/thread_info.h"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"lessThan": "5023c70853ad9829c53d8e9def5ee969b4e1b931",
"status": "affected",
"version": "da57c5414f49ef9e4bcb9ae0bbafd1d650b31411",
"versionType": "git"
},
{
"lessThan": "db45f02b7a5f753efc9003f616dfb5ee4cb6d077",
"status": "affected",
"version": "da57c5414f49ef9e4bcb9ae0bbafd1d650b31411",
"versionType": "git"
},
{
"lessThan": "94b7e3a7e871ae27d4935c76959dfc61829f27f9",
"status": "affected",
"version": "da57c5414f49ef9e4bcb9ae0bbafd1d650b31411",
"versionType": "git"
},
{
"status": "affected",
"version": "ae3471f65a04451f3670cbde6c59e384cca44dc8",
"versionType": "git"
},
{
"lessThan": "4.15",
"status": "affected",
"version": "4.14.24",
"versionType": "semver"
}
]
},
{
"defaultStatus": "affected",
"product": "Linux",
"programFiles": [
"arch/parisc/include/asm/thread_info.h"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"status": "affected",
"version": "4.15"
},
{
"lessThan": "4.15",
"status": "unaffected",
"version": "0",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.18.*",
"status": "unaffected",
"version": "6.18.55",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.2.*",
"status": "unaffected",
"version": "7.2.9",
"versionType": "semver"
},
{
"lessThanOrEqual": "*",
"status": "unaffected",
"version": "7.3",
"versionType": "original_commit_for_fix"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.18.55",
"versionStartIncluding": "4.15",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "7.2.9",
"versionStartIncluding": "4.15",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "7.3",
"versionStartIncluding": "4.15",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.14.24",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nparisc: Increase kernel stack size to 32kb\n\nFor 64-bit Linux kernels, increase the default kernel stack size\n(THREAD_SIZE_ORDER) to 32 kB, in order to avoid kernel crashes which have been\ntriggered recently when building the debian vtk9 package with gcc 17:\n\nstackcheck: kworker/u128:0 will most likely overflow kernel stack (sp:179a83af0, stk bottom-top:179a80000-179a84000)\nKernel panic - not syncing: low stack detected by irq handler - check messages\nCPU: 2 UID: 0 PID: 30760 Comm: kworker/u128:0 Tainted: G W 6.18.46-dirty #1 NONE\nTainted: [W]=WARN\nHardware name: 9000/800/rp3440\nWorkqueue: writeback wb_workfn (flush-259:0)\nBacktrace:\n [\u003c000000004022f050\u003e] show_stack+0x70/0x90\n [\u003c000000004022378c\u003e] dump_stack_lvl+0x124/0x190\n [\u003c000000004022382c\u003e] dump_stack+0x34/0x48\n [\u003c000000004020212c\u003e] vpanic+0x204/0x648\n [\u003c00000000402025c4\u003e] panic+0x54/0x58\n [\u003c0000000040232230\u003e] do_cpu_irq_mask+0x3f8/0x440\n [\u003c0000000040227070\u003e] intr_return+0x0/0xc"
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T06:56:48.902Z",
"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"shortName": "Linux"
},
"references": [
{
"url": "https://git.kernel.org/stable/c/5023c70853ad9829c53d8e9def5ee969b4e1b931"
},
{
"url": "https://git.kernel.org/stable/c/db45f02b7a5f753efc9003f616dfb5ee4cb6d077"
},
{
"url": "https://git.kernel.org/stable/c/94b7e3a7e871ae27d4935c76959dfc61829f27f9"
}
],
"title": "parisc: Increase kernel stack size to 32kb",
"x_generator": {
"engine": "bippy-1.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"assignerShortName": "Linux",
"cveId": "CVE-2026-98917",
"datePublished": "2026-10-23T12:01:46.420Z",
"dateReserved": "2026-09-25T10:25:14.380Z",
"dateUpdated": "2026-10-26T06:56:48.902Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…