CVE-2026-38752: BusyBox awk Stack Overflow DoS

The vulnerability description explicitly states that a stack overflow occurs in the evaluate() function (editors/awk.c) of BusyBox. The provided mailing list archive contains a patch titled ‘[PATCH] awk: fix stack overflow in evaluate()’. This patch directly addresses the vulnerability by introducing a recursion depth check within the evaluate() function. The patch adds a func_depth variable to track the current recursion level and a MAX_AWK_FUNC_DEPTH constant to define the maximum allowed recursion. Before each recursive call, the func_depth is checked against the limit, and an error is reported if the limit is exceeded. This clearly indicates that the evaluate() function, in its state prior to this patch, lacked these crucial recursion controls, making it susceptible to stack overflow when processing crafted AWK scripts. Therefore, the evaluate function is the vulnerable component.