|
|
Info |
Last Modified |
| about 1 year ago |
|
|
|
|
|
Description |
The Linux kernel contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered because the Floating Point Units (FPUs) of the affected processor types do not save and restore the FOP, FID and FPD registers when certain instructions are executed. As a result, Linux does not clear these registers either. When a context switch occurs, a user can potentially read these uncleared registers which could disclose floating point information, resulting in a loss of confidentiality.
|
|
Classification |
Location:
Local Access Required
Attack Type:
Information Disclosure
Impact:
Loss of Confidentiality
Exploit:
Exploit Unknown
Disclosure:
OSVDB Verified
|
|
Technical |
The issue is only present on 7th (K7) and 8th (K8) generation AMD64 processors. All other platforms are not affected.
|
|
Solution |
Upgrade to version 2.6.16.9 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
|
|
Products |
|
Kernel
 |
2.6.16.8 |
|
|
|
|
|
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
