{"cve":"CVE-2026-98917","nvd":{"published":"2026-10-23T13:17:12.247","modified":"2026-10-26T07:17:17.630","status":"Received","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nparisc: Increase kernel stack size to 32kb\n\nFor 64-bit Linux kernels, increase the default kernel stack size\n(THREAD_SIZE_ORDER) to 32 kB, in order to avoid kernel crashes which have been\ntriggered recently when building the debian vtk9 package with gcc 17:\n\nstackcheck: kworker/u128:0 will most likely overflow kernel stack (sp:179a83af0, stk bottom-top:179a80000-179a84000)\nKernel panic - not syncing: low stack detected by irq handler - check messages\nCPU: 2 UID: 0 PID: 30760 Comm: kworker/u128:0 Tainted: G W 6.18.46-dirty #1 NONE\nTainted: [W]=WARN\nHardware name: 9000/800/rp3440\nWorkqueue: writeback wb_workfn (flush-259:0)\nBacktrace:\n [<000000004022f050>] show_stack+0x70/0x90\n [<000000004022378c>] dump_stack_lvl+0x124/0x190\n [<000000004022382c>] dump_stack+0x34/0x48\n [<000000004020212c>] vpanic+0x204/0x648\n [<00000000402025c4>] panic+0x54/0x58\n [<0000000040232230>] do_cpu_irq_mask+0x3f8/0x440\n [<0000000040227070>] intr_return+0x0/0xc","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/5023c70853ad9829c53d8e9def5ee969b4e1b931","https://git.kernel.org/stable/c/94b7e3a7e871ae27d4935c76959dfc61829f27f9","https://git.kernel.org/stable/c/db45f02b7a5f753efc9003f616dfb5ee4cb6d077"],"products":[],"source":"nvd","synced_at":"2026-10-26T07:33:01.631659812+00:00"},"epss":{"cve":"CVE-2026-98917","score":0.00167,"percentile":0.05861,"date":"2026-10-25"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}