Messages in this thread | | | Date | Wed, 9 May 2018 22:01:54 +0900 | From | Masami Hiramatsu <> | Subject | [PATCH 0/2] uprobes: kprobes: x86: Reject probing MOV SS/POP SS |
| |
Oops, I missed adding kprobes: and POP SS on subject...
On Wed, 9 May 2018 21:57:44 +0900 Masami Hiramatsu <mhiramat@kernel.org> wrote:
> Hi, > > I found the CVE-2018-1087 and CVE-2018-8897 should > be related to kprobes and uprobes too, since both > are using #DB for single stepping. > > I decided to just reject probes on MOV SS and POP SS > because those are not recommended to use (Intel SDM > recommend to use LSS instead), thus it might be > rare case. > > Oleg, could you review the uprobes patch? > > Thank you, > > --- > > Masami Hiramatsu (2): > kprobes: x86: Prohibit probing on exception masking instructions > uprobes: x86: Prohibit probing on MOV SS instruction > > > arch/x86/include/asm/insn.h | 18 ++++++++++++++++++ > arch/x86/kernel/kprobes/core.c | 4 ++++ > arch/x86/kernel/uprobes.c | 4 ++++ > 3 files changed, 26 insertions(+) > > -- > Masami Hiramatsu (Linaro) <mhiramat@kernel.org>
-- Masami Hiramatsu <mhiramat@kernel.org>
| |