Description
stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of the stack protector guard, which allows an attacker to bypass the protection of -fstack-protector, -fstack-protector-all, -fstack-protector-strong, and -fstack-protector-explicit against stack overflow by controlling what the stack canary is compared against.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | gcc-snapshot +1 | No fix yet | — |
| Ubuntu 26.04 LTS | gcc-snapshot +1 | No fix yet | — |
| Ubuntu 25.10 | gcc-snapshot +1 | No fix yet | — |
| Ubuntu 24.04 LTS | gcc-snapshot +1 | No fix yet | — |
| Ubuntu 22.04 LTS | gcc-snapshot +1 | No fix yet | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | gcc-7 +2 | No fix yet | — |
| Ubuntu 18.04 LTS | gcc-6 +5 | No fix yet | — |
| Ubuntu 16.04 LTS | gcc-4.8 +3 | No fix yet | — |
| Ubuntu 14.04 LTS | gcc-4.8 | No fix yet | — |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | gcc-6 | 6.5.0-r5 | — |
Advisories 4
- SSA-398330 SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.5 Siemens ProductCERT · Oct 13, 2026
- ICSA-23-348-10 Siemens SIMATIC S7-1500 CISA ICS & IT advisories · Aug 12, 2025
- ICSA-23-080-07 Siemens SCALANCE Third-Party CISA ICS & IT advisories · Mar 14, 2023
- SSA-565386 SSA-565386: Third-Party Component Vulnerabilities in SCALANCE W-700 IEEE 802.11ax devices before V2.0 Siemens ProductCERT · Mar 14, 2023