| Summary: | Kernel : perf/x86: offcore_rsp valid mask for SNB/IVB (CVE-2013-2146) | ||
|---|---|---|---|
| Product: | Gentoo Security | Reporter: | Agostino Sarubbo <ago> |
| Component: | Kernel | Assignee: | Gentoo Kernel Security <security-kernel> |
| Status: | RESOLVED FIXED | ||
| Severity: | normal | CC: | kernel |
| Priority: | Normal | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| URL: | https://bugzilla.redhat.com/show_bug.cgi?id=971309 | ||
| Whiteboard: | |||
| Package list: | Runtime testing required: | --- | |
*** Bug 483444 has been marked as a duplicate of this bug. *** In 3.8.9 onward |
From ${URL} : Linux kernel built with the Performance Events Subsystem(CONFIG_PERF_EVENTS=y) is vulnerable to a kernel crash flaw, caused by incorrect masking of the reserved bits. A user/program could use this flaw to crash the kernel, resulting in DoS. Upstream fix: ------------- -> https://git.kernel.org/linus/f1923820c447e986a9da0fc6bf60c1dccdf0408e Reference: ---------- -> http://www.openwall.com/lists/oss-security/2013/06/05/23