Bug 501208

Summary:	Kernel: arch/x86/include/asm: Denial of Service (CVE-2014-1438)
Product:	Gentoo Security	Reporter:	GLSAMaker/CVETool Bot <glsamaker>
Component:	Kernel	Assignee:	Gentoo Kernel Security <security-kernel>
Status:	RESOLVED FIXED
Severity:	normal	CC:	kernel
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	[ < 3.12.8 ]
Package list:		Runtime testing required:	---

Description GLSAMaker/CVETool Bot gentoo-dev

2014-02-13 15:38:24 UTC

CVE-2014-1438 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1438):
  The restore_fpu_checking function in arch/x86/include/asm/fpu-internal.h in
  the Linux kernel before 3.12.8 on the AMD K7 and K8 platforms does not clear
  pending exceptions before proceeding to an EMMS instruction, which allows
  local users to cause a denial of service (task kill) or possibly gain
  privileges via a crafted application.

Comment 1 John Helmert III archtester

2022-03-25 19:34:49 UTC

Fix in 3.13: https://github.com/torvalds/linux/commit/26bef1318adc1b3a530ecc807ef99346db2aa8b0