Linux Kernel Stack Protector Omission Vulnerability in Early Boot Process

A vulnerability has been identified in the Linux kernel related to the handling of stack protection during the early boot process. This issue arises because the boot function 'boot_init_stack_canary' requires a specific function attribute to omit stack protectors, a feature not supported by GCC prior to version 11. The vulnerability can lead to a mismatch in the canary value, causing a call to '__stack_chk_fail()', which then triggers a system panic. The issue has been addressed by introducing the '__no_stack_protector' attribute in the stable Linux kernel.

Impact

Exploitation of this vulnerability causes a system panic, disrupting the normal boot process.