Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Andi Kleen 18bd057b14 [PATCH] i386/x86-64: Fix x87 information leak between processes ... AMD K7/K8 CPUs only save/restore the FOP/FIP/FDP x87 registers in FXSAVE when an exception is pending. This means the value leak through context switches and allow processes to observe some x87 instruction state of other processes. This was actually documented by AMD, but nobody recognized it as being different from Intel before. The fix first adds an optimization: instead of unconditionally calling FNCLEX after each FXSAVE test if ES is pending and skip it when not needed. Then do a x87 load from a kernel variable to clear FOP/FIP/FDP. This means other processes always will only see a constant value defined by the kernel in their FP state. I took some pain to make sure to chose a variable that's already in L1 during context switch to make the overhead of this low. Also alternative() is used to patch away the new code on CPUs who don't need it. Patch for both i386/x86-64. The problem was discovered originally by Jan Beulich. Richard Brunner provided the basic code for the workarounds, with contribution from Jan. This is CVE-2006-1056 Cc: richard.brunner@amd.com Cc: jbeulich@novell.com Signed-off-by: Andi Kleen <ak@suse.de> Signed-off-by: Linus Torvalds <torvalds@osdl.org>		2006-04-20 07:58:11 -07:00
..
mach-bigsmp	[PATCH] x86: convert bigsmp to use flat physical mode	2006-01-06 08:33:37 -08:00
mach-default	[PATCH] RTC: Fix up some RTC whitespace and style	2006-03-28 09:16:01 -08:00
mach-es7000	[PATCH] Compilation fix for ES7000 when no ACPI is specified in config (i386)	2006-03-23 07:38:04 -08:00
mach-generic
mach-numaq
mach-summit	[PATCH] USB: Always do usb-handoff	2005-10-28 16:47:49 -07:00
mach-visws	[PATCH] i386: fix uses of user_mode() vs. user_mode_vm()	2006-03-23 07:38:05 -08:00
mach-voyager	[PATCH] i386: fix uses of user_mode() vs. user_mode_vm()	2006-03-23 07:38:05 -08:00
8253pit.h
a.out.h
acpi.h	[PATCH] don't call check_acpi_pci() on x86 with ACPI disabled	2006-03-22 07:53:54 -08:00
agp.h
alternative.h	[PATCH] x86: SMP alternatives	2006-03-23 07:38:04 -08:00
apic.h	[PATCH] i386: Consolidate modern APIC handling	2006-04-09 11:53:51 -07:00
apicdef.h	[PATCH] i386 kdump timer vector lockup fix	2006-03-31 12:18:50 -08:00
arch_hooks.h	[PATCH] x86: early printk handling fixes	2006-03-23 07:38:05 -08:00
atomic.h	[PATCH] asm-i386/atomic.h: local_irq_save should be used instead of local_irq_disable	2006-04-19 09:13:50 -07:00
auxvec.h
bitops.h	[PATCH] bitops: i386: use generic bitops	2006-03-26 08:57:12 -08:00
boot.h
bug.h
bugs.h	[PATCH] i386: move SIMD initialization	2006-01-06 08:33:34 -08:00
byteorder.h
cache.h	[PATCH] Move read_mostly definition to asm/cache.h	2006-03-23 07:38:10 -08:00
cacheflush.h	[PATCH] x86/x86_64: mark rodata section read only: x86 parts	2006-01-06 08:33:36 -08:00
checksum.h
cpu.h
cpufeature.h	[PATCH] i386/x86-64: Fix x87 information leak between processes	2006-04-20 07:58:11 -07:00
cputime.h
current.h	[PATCH] mark several functions __always_inline	2006-01-14 18:27:15 -08:00
debugreg.h
delay.h
desc.h	[PATCH] x86: fix broken SMP boot sequence	2006-02-24 14:31:38 -08:00
div64.h	[PATCH] include/asm-i386/: "extern inline" -> "static inline"	2005-09-10 10:06:34 -07:00
dma-mapping.h	[PATCH] i386: make pci_map_single/pci_map_sg warn for zero length.	2006-01-11 19:04:56 -08:00
dma.h
dmi.h	[PATCH] x86_64: Implement early DMI scanning	2006-03-25 09:10:55 -08:00
e820.h	[PATCH] x86_64: Introduce e820_all_mapped	2006-04-09 11:53:50 -07:00
edac.h	[PATCH] EDAC: core EDAC support code	2006-01-18 19:20:31 -08:00
elf.h	[PATCH] fix remaining missing includes	2005-11-07 07:53:41 -08:00
emergency-restart.h
errno.h
fcntl.h
fixmap.h
floppy.h	[PATCH] Remove long dead i386 floppy asm code	2006-03-31 12:18:50 -08:00
futex.h	[PATCH] lightweight robust futexes updates	2006-03-27 08:44:49 -08:00
genapic.h
hardirq.h
highmem.h
hpet.h	[PATCH] x86_64: Fix drift with HPET timer enabled	2006-04-09 11:53:53 -07:00
hw_irq.h	Revert "i386: move apic init in init_IRQs"	2005-10-31 19:16:17 -08:00
i387.h	[PATCH] i386/x86-64: Fix x87 information leak between processes	2006-04-20 07:58:11 -07:00
i8253.h
i8259.h
ide.h	[PATCH] ide: explain the PCI bus test we do in <asm-i386/ide.h>	2005-11-10 00:10:37 +01:00
io.h	[PATCH] remove ISA legacy functions: remove the helpers	2006-03-24 07:33:19 -08:00
io_apic.h
ioctl.h	[PATCH] Generic ioctl.h	2006-01-10 08:01:34 -08:00
ioctls.h
ipc.h
ipcbuf.h
irq.h	[PATCH] Make vm86 support optional	2006-01-08 20:14:11 -08:00
ist.h
kdebug.h	[PATCH] Notifier chain update: API changes	2006-03-27 08:44:50 -08:00
kexec.h	[PATCH] Kdump: i386 compiler warning fix	2006-01-10 08:01:27 -08:00
kmap_types.h
kprobes.h	[PATCH] x86: kprobes-booster	2006-03-26 08:57:04 -08:00
ldt.h
linkage.h
local.h	[PATCH] make local_t signed	2006-03-31 12:18:55 -08:00
math_emu.h
mc146818rtc.h
mca.h
mca_dma.h
mman.h	[PATCH] add asm-generic/mman.h	2006-02-15 15:32:22 -08:00
mmu.h
mmu_context.h
mmx.h
mmzone.h	[PATCH] unify pfn_to_page: i386 pfn_to_page	2006-03-27 08:44:44 -08:00
module.h	[PATCH] Base support for AMD Geode GX/LX processors	2006-01-06 08:33:38 -08:00
mpspec.h	[PATCH] mptspec: remove duplicate #include	2006-04-11 06:18:34 -07:00
mpspec_def.h	[PATCH] mpspec: remove unneeded packed attribute	2006-01-06 08:33:39 -08:00
msgbuf.h
msi.h	[PATCH] PCI: Change MSI to use physical delivery mode always	2005-11-10 16:09:18 -08:00
msr.h
mtrr.h	[PATCH] Fix the imlicit declaration of mtrr_centaur_report_mcr in arch/i386/kernel/cpu/centaur.c	2006-03-23 07:38:06 -08:00
mutex.h	[PATCH] x86: SMP alternatives	2006-03-23 07:38:04 -08:00
namei.h
nmi.h
node.h
numa.h	[PATCH] x86-64: Use ACPI PXM to parse PCI<->node assignments	2005-09-12 10:49:57 -07:00
numaq.h
page.h	[PATCH] unify pfn_to_page: i386 pfn_to_page	2006-03-27 08:44:44 -08:00
param.h	[PATCH] Avoid namespace pollution in <asm/param.h>	2006-01-02 08:38:38 -08:00
parport.h
pci-direct.h
pci.h
percpu.h
pgalloc.h
pgtable-2level-defs.h
pgtable-2level.h	[PATCH] i386: actively synchronize vmalloc area when registering certain callbacks	2006-03-23 07:38:05 -08:00
pgtable-3level-defs.h
pgtable-3level.h	[PATCH] i386: actively synchronize vmalloc area when registering certain callbacks	2006-03-23 07:38:05 -08:00
pgtable.h	[PATCH] Enable mprotect on huge pages	2006-03-22 07:54:03 -08:00
poll.h	[PATCH] POLLRDHUP/EPOLLRDHUP handling for half-closed devices notifications	2006-03-25 08:22:56 -08:00
posix_types.h
processor.h	[PATCH] arch/i386/kernel/microcode.c: remove the obsolete microcode_ioctl	2006-03-28 09:16:06 -08:00
ptrace.h	[PATCH] PTRACE_SYSEMU is only for i386 and clashes with other ptrace codes of other archs	2006-01-08 20:14:04 -08:00
resource.h
rtc.h
rwlock.h	[PATCH] x86: SMP alternatives	2006-03-23 07:38:04 -08:00
rwsem.h	[PATCH] add sem_is_read/write_locked()	2005-10-29 21:40:35 -07:00
scatterlist.h
seccomp.h
sections.h
segment.h	[PATCH] x86: Pnp segments in segment h	2006-01-06 08:33:34 -08:00
semaphore.h	[PATCH] x86: SMP alternatives	2006-03-23 07:38:04 -08:00
sembuf.h
serial.h
setup.h	[PATCH] unify PFN_* macros	2006-03-27 08:44:48 -08:00
shmbuf.h
shmparam.h
sigcontext.h
siginfo.h
signal.h	[PATCH] Handle TIF_RESTORE_SIGMASK for i386	2006-01-18 19:20:29 -08:00
smp.h	[PATCH] PCI: Change MSI to use physical delivery mode always	2005-11-10 16:09:18 -08:00
socket.h
sockios.h
sparsemem.h
spinlock.h	[PATCH] i386 spinlocks: disable interrupts only if we enabled them	2006-03-23 07:38:06 -08:00
spinlock_types.h
srat.h
stat.h	[PATCH] 2TB files: st_blocks is invalid when calling stat64	2006-03-26 08:57:00 -08:00
statfs.h
string.h	[PATCH] mark several functions __always_inline	2006-01-14 18:27:15 -08:00
suspend.h
system.h	[PATCH] kill include/linux/platform.h, default_idle() cleanup	2006-03-24 07:33:21 -08:00
termbits.h
termios.h
thread_info.h	[PATCH] i386: fix singlestepping though a syscall	2006-02-17 08:55:21 -08:00
timer.h
timex.h
tlb.h
tlbflush.h
topology.h	[PATCH] sched: new sched domain for representing multi-core	2006-03-27 08:44:43 -08:00
types.h	[PATCH] 2TB files: add blkcnt_t	2006-03-26 08:57:00 -08:00
uaccess.h	[PATCH] i386: Add a temporary to make put_user more type safe	2006-03-23 07:38:04 -08:00
ucontext.h
unaligned.h
unistd.h	[PATCH] splice: add support for sys_tee()	2006-04-11 15:51:17 +02:00
user.h
vga.h
vic.h
vm86.h	[PATCH] Make vm86 support optional	2006-01-08 20:14:11 -08:00
voyager.h
xor.h