Linux Kernel KASAN Stack-Out-Of-Bounds Vulnerability in RISC-V Architecture

A stack-out-of-bounds vulnerability has been identified in the Linux kernel's RISC-V architecture, specifically when the CONFIG_FRAME_POINTER option is disabled. In this scenario, the stack unwinding function 'walk_stackframe' can unpredictably read stack data. If Kernel Address Sanitizer (KASAN) is enabled, this improper stack handling can trigger a KASAN error, indicating a bad memory access. The issue arises because the stack unwinding process does not accurately track stack frames, leading to potential memory corruption or undefined behavior.

Impact

Exploitation of this vulnerability can cause a stack-out-of-bounds error, as reported by KASAN, indicating a bad access to memory. This type of error can lead to memory corruption, the introduction of vulnerabilities, or the bypassing of security mechanisms.