Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.
Bug 721283 - (CVE-2011-2693) CVE-2011-2693 kernel: panic with NMI enabled while using perf
CVE-2011-2693 kernel: panic with NMI enabled while using perf
Status: CLOSED DUPLICATE of bug 719228
Product: Security Response
Classification: Other
Component: vulnerability (Show other bugs)
unspecified
All Linux
medium Severity medium
: ---
: ---
Assigned To: Red Hat Product Security
public=20110319,reported=20110714,sou...
: Security
Depends On: 721293 721294 722369
Blocks: 721190
  Show dependency treegraph
 
Reported: 2011-07-14 04:28 EDT by Eugene Teo (Security Response)
Modified: 2016-11-08 10:55 EST (History)
25 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2011-09-06 14:42:43 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

  None (edit)
Description Eugene Teo (Security Response) 2011-07-14 04:28:22 EDT
Kernel panic when using perf and nmi_watchdog together.

The following patch solves the problems introduced by Robert's commit 41bf498 and reported by Arun Sharma. This commit gets rid of the base + index notation for reading and writing PMU msrs.

The problem is that for fixed counters, the new calculation for the base did not take into account the fixed counter indexes, thus all fixed counters were read/written from fixed counter 0. Although all fixed counters share the same config MSR, they each have their own counter register.

Without:

 $ task -e unhalted_core_cycles -e instructions_retired -e baclears noploop 1 noploop for 1 seconds

  242202299 unhalted_core_cycles (0.00% scaling, ena=1000790892, run=1000790892)
 2389685946 instructions_retired (0.00% scaling, ena=1000790892, run=1000790892)
      49473 baclears             (0.00% scaling, ena=1000790892, run=1000790892)

With:

 $ task -e unhalted_core_cycles -e instructions_retired -e baclears noploop 1 noploop for 1 seconds

 2392703238 unhalted_core_cycles (0.00% scaling, ena=1000840809, run=1000840809)
 2389793744 instructions_retired (0.00% scaling, ena=1000840809, run=1000840809)
      47863 baclears             (0.00% scaling, ena=1000840809, run=1000840809)

Upstream commit:
http://git.kernel.org/linus/fc66c5210ec2539e800e87d7b3a985323c7be96e
Comment 20 Eugene Teo (Security Response) 2011-08-12 02:42:28 EDT
Upstream commit:
http://git.kernel.org/linus/fc66c5210ec2539e800e87d7b3a985323c7be96e
Comment 24 Petr Matousek 2011-09-06 14:42:43 EDT

*** This bug has been marked as a duplicate of bug 719228 ***
Comment 25 Eugene Teo (Security Response) 2011-09-13 03:27:20 EDT
(In reply to comment #24)
> 
> *** This bug has been marked as a duplicate of bug 719228 ***

It was found to be the same issue as CVE-2011-2521. CVE-2011-2693 is rejected.

Note You need to log in before you can comment on or make changes to this bug.