Messages in this thread |  | | Subject | Re: [tip:x86/urgent] x86-64, modify_ldt: Ban 16-bit segments on 64-bit kernels | | From | "H. Peter Anvin" <> | | Date | Sat, 12 Apr 2014 20:02:15 -0700 |
| |
It leaks security sensitive information to userspace and corrupts the upper half of ESP because it lacks the equivalent of the espfix workaround.
On April 12, 2014 7:56:48 PM PDT, Andi Kleen <andi@firstfloor.org> wrote: >"H. Peter Anvin" <hpa@zytor.com> writes: >> >> But yes, we can make it configurable, but the default should almost >> certainly be off. > >Why? Either it works or it doesn't. > >If it works it doesn't make any sense to have a sysctl. > >-Andi
-- Sent from my mobile phone. Please pardon brevity and lack of formatting.
|  |