Bug 526788 - (CVE-2009-2910) CVE-2009-2910 kernel: x86_64 32 bit process register leak
CVE-2009-2910 kernel: x86_64 32 bit process register leak
Status: CLOSED ERRATA
Product: Security Response
Classification: Other
Component: vulnerability (Show other bugs)
unspecified
All Linux
medium Severity medium
: ---
: ---
Assigned To: Red Hat Product Security
source=internet,public=20091001,repor...
: Security
Depends On: 526793 526794 526795 526796 526797 526798 531542 537297
Blocks:
  Show dependency treegraph
 
Reported: 2009-10-01 15:10 EDT by Josh Bressers
Modified: 2012-03-28 04:54 EDT (History)
14 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 531542 (view as bug list)
Environment:
Last Closed: 2012-03-28 04:54:32 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:


Attachments (Terms of Use)
Upstream patch (3.37 KB, patch)
2009-10-01 15:10 EDT, Josh Bressers
no flags Details | Diff

  None (edit)
Description Josh Bressers 2009-10-01 15:10:19 EDT
Created attachment 363386 [details]
Upstream patch

An information leak was discovered in the kernel where a 32-bit process running in 64-bit mode could possibly read certain 64 bit registers. Quoting the upstream commit:
http://lkml.org/lkml/2009/10/1/164

    x86: Don't leak 64-bit kernel register values to 32-bit processes

    While 32-bit processes can't directly access R8...R15, they can
    gain access to these registers by temporarily switching themselves
    into 64-bit mode.

    Therefore, registers not preserved anyway by called C functions
    (i.e. R8...R11) must be cleared prior to returning to user mode.
Comment 8 Fedora Update System 2009-10-14 20:21:25 EDT
kernel-2.6.27.37-170.2.104.fc10 has been submitted as an update for Fedora 10.
http://admin.fedoraproject.org/updates/kernel-2.6.27.37-170.2.104.fc10
Comment 9 Fedora Update System 2009-10-15 18:37:12 EDT
kernel-2.6.27.37-170.2.104.fc10 has been pushed to the Fedora 10 stable repository.  If problems still persist, please make note of it in this bug report.
Comment 10 Fedora Update System 2009-10-17 21:57:46 EDT
kernel-2.6.30.9-90.fc11 has been submitted as an update for Fedora 11.
http://admin.fedoraproject.org/updates/kernel-2.6.30.9-90.fc11
Comment 11 Fedora Update System 2009-10-27 02:47:58 EDT
kernel-2.6.30.9-90.fc11 has been pushed to the Fedora 11 stable repository.  If problems still persist, please make note of it in this bug report.
Comment 13 errata-xmlrpc 2009-11-03 13:21:37 EST
This issue has been addressed in following products:

  MRG for RHEL-5

Via RHSA-2009:1540 https://rhn.redhat.com/errata/RHSA-2009-1540.html
Comment 15 errata-xmlrpc 2009-12-15 12:18:30 EST
This issue has been addressed in following products:

  Red Hat Enterprise Linux 4

Via RHSA-2009:1671 https://rhn.redhat.com/errata/RHSA-2009-1671.html
Comment 16 errata-xmlrpc 2010-01-19 18:37:03 EST
This issue has been addressed in following products:

  Red Hat Enterprise Linux 5

Via RHSA-2010:0046 https://rhn.redhat.com/errata/RHSA-2010-0046.html

Note You need to log in before you can comment on or make changes to this bug.