Oops, I missed adding kprobes: and POP SS on subject...
On Wed, 9 May 2018 21:57:44 +0900
Masami Hiramatsu <[email protected]> wrote:
> Hi,
>
> I found the CVE-2018-1087 and CVE-2018-8897 should
> be related to kprobes and uprobes too, since both
> are using #DB for single stepping.
>
> I decided to just reject probes on MOV SS and POP SS
> because those are not recommended to use (Intel SDM
> recommend to use LSS instead), thus it might be
> rare case.
>
> Oleg, could you review the uprobes patch?
>
> Thank you,
>
> ---
>
> Masami Hiramatsu (2):
> kprobes: x86: Prohibit probing on exception masking instructions
> uprobes: x86: Prohibit probing on MOV SS instruction
>
>
> arch/x86/include/asm/insn.h | 18 ++++++++++++++++++
> arch/x86/kernel/kprobes/core.c | 4 ++++
> arch/x86/kernel/uprobes.c | 4 ++++
> 3 files changed, 26 insertions(+)
>
> --
> Masami Hiramatsu (Linaro) <[email protected]>
--
Masami Hiramatsu <[email protected]>
