Module Name: src
Committed By: snj
Date: Sat Sep 9 16:53:55 UTC 2017
Modified Files:
src/doc [netbsd-6-0]: CHANGES-6.0.7
Log Message:
1502
To generate a diff of this commit:
cvs rdiff -u -r1.1.2.115 -r1.1.2.116 src/doc/CHANGES-6.0.7
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Modified files:
Index: src/doc/CHANGES-6.0.7
diff -u src/doc/CHANGES-6.0.7:1.1.2.115 src/doc/CHANGES-6.0.7:1.1.2.116
--- src/doc/CHANGES-6.0.7:1.1.2.115 Mon Sep 4 16:04:06 2017
+++ src/doc/CHANGES-6.0.7 Sat Sep 9 16:53:55 2017
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-6.0.7,v 1.1.2.115 2017/09/04 16:04:06 snj Exp $
+# $NetBSD: CHANGES-6.0.7,v 1.1.2.116 2017/09/09 16:53:55 snj Exp $
A complete list of changes from the NetBSD 6.0.6 release to the NetBSD 6.0.7
release:
@@ -15132,3 +15132,11 @@ sys/arch/sparc64/sparc64/compat_13_machd
in %pstate and get kernel privileges on the hardware.
[maxv, ticket #1501]
+sys/compat/linux32/arch/amd64/linux32_machdep.c 1.39
+
+
+ Fix a ring0 escalation vulnerability in compat_linux32 where the
+ index of %cs is controlled by userland, making it easy to trigger
+ the page fault and get kernel privileges.
+ [maxv, ticket #1502]
+
