** Description changed:

- The valid mask for both offcore_response_0 and offcore_response_1 was
- wrong for SNB/SNB-EP, IVB/IVB-EP. It was possible to write to reserved
- bit and cause a GP fault crashing the kernel. This patch fixes the
- problem by correctly marking the reserved bits in the valid mask for all
- the processors mentioned above.
+ arch/x86/kernel/cpu/perf_event_intel.c in the Linux kernel before 3.8.9,
+ when the Performance Events Subsystem is enabled, specifies an incorrect
+ bitmask, which allows local users to cause a denial of service (general
+ protection fault and system crash) by attempting to set a reserved bit.
  
  Break-Fix: - f1923820c447e986a9da0fc6bf60c1dccdf0408e

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1188353

Title:
  CVE-2013-2146

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1188353/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to