[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Wed, 26 Nov 2014 02:42:15 -0500 (EST)
From: cve-assign@...re.org
To: luto@...capital.net
Cc: cve-assign@...re.org, oss-security@...ts.openwall.com
Subject: Re: CVE Request: Linux kernel LDT handling bugs
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
> 1. espfix64 is designed to double-fault and recover on failures. This
> worked great for #GP and #NP, but it didn't work for #SS.
> https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6f442be2fb22be02cafa606f1769fa1e6f894441
Use CVE-2014-9090.
> 2. When trying and failing to return directly to userspace from IST
> context
> I'm not sure that this one is even worthy of a CVE.
There is currently no CVE ID for finding 2.
> 3. When the kernel tried and failed to return directly to userspace
> from IST context and espfix64 was *not* involved
> It's also harmless unless an attacker can persuade the kernel to
> corrupt its stack, and that is unlikely to happen by itself.
There is currently no CVE ID for finding 3.
- --
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)
iQEcBAEBAgAGBQJUdYDIAAoJEKllVAevmvms0TIH/its/p32/ROv6gtP0xdrtKkO
cDWFeEZyBcGKeIHjccURiRZZXMwAgAuVvY+FmScPw+Dg0YrMcU4G7rAD/3USDo5v
RN8V+RRPzwfawdVPMery46H4JbWZm1KCujXN8r4RtbAfrWnq/KnyaT0PNMFuFcat
u/YCZpKacaDH1hBMKgoVaWgJzmIwZSDdDdE0HvN25/A7lTWg3Bm1SQPUxxdhduup
EkO6aE2JKwexS5hQi+Nr+2djtt8DMbsWKVGmxXTZ0UY3jOcyS/o6g6cCpPD1G8Nx
jNiNUznCdL9kqiARlNYwwHp5DczswjVAoLKh/pRJL7HvN6pjqdhYjCZUc/VG7G8=
=OQfC
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
