[PATCH 0/2] uprobes: x86: Reject probing MOV SS

From: Masami Hiramatsu
Date: Wed May 09 2018 - 08:58:17 EST


Hi,

I found the CVE-2018-1087 and CVE-2018-8897 should
be related to kprobes and uprobes too, since both
are using #DB for single stepping.

I decided to just reject probes on MOV SS and POP SS
because those are not recommended to use (Intel SDM
recommend to use LSS instead), thus it might be
rare case.

Oleg, could you review the uprobes patch?

Thank you,

---

Masami Hiramatsu (2):
kprobes: x86: Prohibit probing on exception masking instructions
uprobes: x86: Prohibit probing on MOV SS instruction


arch/x86/include/asm/insn.h | 18 ++++++++++++++++++
arch/x86/kernel/kprobes/core.c | 4 ++++
arch/x86/kernel/uprobes.c | 4 ++++
3 files changed, 26 insertions(+)

--
Masami Hiramatsu (Linaro) <mhiramat@xxxxxxxxxx>