NEW VULNERABILITY IN GCC STACK SMASHING PROTECTION ON ARM64

Summary from the TLDR InfoSec newsletter

A new vulnerability was found in which GCC’s stack smashing protection has no effect on variable length arrays or buffers allocated with alloca(). The vulnerability targeted 64-bit ARM architecture. This article includes details about the vulnerability, a demonstration of the vulnerability, and a discussion of the response. A fix is available on the GCC mailing list.