CVE-2024-26712

A flaw was found in the Linux kernel's PowerPC Kernel Address Sanitizer (KASAN) component. When initializing memory regions that are not aligned to page boundaries, the kernel miscalculates virtual addresses outside the allocated memory space. This flaw leads to unintended memory overwrites as other subsystems reuse the unreserved memory, which may allow a local user to cause a system crash and a Denial of Service (DoS).

This vulnerability is rated as Low severity because it is confined to 32-bit PowerPC architectures and occurs during early Kernel Address Sanitizer (KASAN) memory initialization. Red Hat Enterprise Linux supports only 64-bit PowerPC (ppc64le) and does not enable KASAN in production kernels, meaning the vulnerable code is neither compiled nor executed on supported systems. Consequently, standard enterprise deployments are not exposed to this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.