[PATCH 0/2] uprobes: kprobes: x86: Reject probing MOV SS/POP SS

Masami Hiramatsu
2018-05-09T13:02:00Z

Oops, I missed adding kprobes: and POP SS on subject...

On Wed, 9 May 2018 21:57:44 +0900
Masami Hiramatsu <mhiramat@kernel.org> wrote:

> Hi,
>
> I found the CVE-2018-1087 and CVE-2018-8897 should
> be related to kprobes and uprobes too, since both
> are using #DB for single stepping.
>
> I decided to just reject probes on MOV SS and POP SS
> because those are not recommended to use (Intel SDM
> recommend to use LSS instead), thus it might be
> rare case.
>
> Oleg, could you review the uprobes patch?
>
> Thank you,
>
> ---
>
> Masami Hiramatsu (2):
> kprobes: x86: Prohibit probing on exception masking instructions
> uprobes: x86: Prohibit probing on MOV SS instruction
>
>
> arch/x86/include/asm/insn.h | 18 ++++++++++++++++++
> arch/x86/kernel/kprobes/core.c | 4 ++++
> arch/x86/kernel/uprobes.c | 4 ++++
> 3 files changed, 26 insertions(+)
>
> --
> Masami Hiramatsu (Linaro) <mhiramat@kernel.org>

--
Masami Hiramatsu <mhiramat@kernel.org>