Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 4 Jun 2013 10:59:33 -0700
From: Andi Kleen <ak@...ux.jf.intel.com>
To: Marcus Meissner <meissner@...e.de>
Cc: OSS Security List <oss-security@...ts.openwall.com>,
        a.p.zijlstra@...llo.nl, eranian@...gle.com, security@...nel.org
Subject: Re: CVE Request: More perf security fixes

> 3. Information leak (??) via perf LBR filter 

Leak + crash actually.

> 
> https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6e15eb3ba6c0249c9e8c783517d131b47db995ca
> 
> commit 6e15eb3ba6c0249c9e8c783517d131b47db995ca
> Author: Peter Zijlstra <a.p.zijlstra@...llo.nl>
> Date:   Fri May 3 14:11:24 2013 +0200
> 
>     perf/x86/intel/lbr: Fix LBR filter
>     
>     The LBR 'from' adddress is under full userspace control; ensure
>     we validate it before reading from it.

This patch is known broken and causes additional crashes.
There's no updated patch for that so far.

-Andi

Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.