Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Fri, 26 Feb 2016 12:28:23 -0800
From: Andy Lutomirski <>
To: oss security list <>
Subject: Partial SMAP bypass on 64-bit Linux kernels

Hi all-

Those of you using 64-bit Linux kernels on SMAP-capable systems (which
are still very rare in the server space) with ia32 emulation enabled
will want to backport:

That patch fixes a bug that exposed a fairly large kernel code surface
to a straightforward SMAP bypass.

Credit to Brian Gerst who noticed the bug.

This bug is present in all kernels from 3.10 on AFAICT.  Kernels
before 3.10 don't support SMAP in the first place.  32-bit kernels are
not affected (but why would you be running a 32-bit kernel on
SMAP-capable hardware in the first place?).


Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.