References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Change History

https://git.kernel.org/stable/c/2cfb464669b645a9b98478b74f2bcea9860dcff1

https://git.kernel.org/stable/c/93c1800b3799f17375989b0daf76497dd3e80922

https://git.kernel.org/stable/c/d91ddd05082691e69b30744825d18ae799293258

In the Linux kernel, the following vulnerability has been resolved:

x86/kexec: Fix bug with call depth tracking

The call to cc_platform_has() triggers a fault and system crash if call depth
tracking is active because the GS segment has been reset by load_segments() and
GS_BASE is now 0 but call depth tracking uses per-CPU variables to operate.

Call cc_platform_has() earlier in the function when GS is still valid.

  [ bp: Massage. ]

kernel.org https://git.kernel.org/stable/c/2cfb464669b645a9b98478b74f2bcea9860dcff1 [No types assigned]

kernel.org https://git.kernel.org/stable/c/93c1800b3799f17375989b0daf76497dd3e80922 [No types assigned]

kernel.org https://git.kernel.org/stable/c/d91ddd05082691e69b30744825d18ae799293258 [No types assigned]