[PATCH 0/2] uprobes: x86: Reject probing MOV SS
From: Masami Hiramatsu
Date: Wed May 09 2018 - 08:58:17 EST
Hi,
I found the CVE-2018-1087 and CVE-2018-8897 should
be related to kprobes and uprobes too, since both
are using #DB for single stepping.
I decided to just reject probes on MOV SS and POP SS
because those are not recommended to use (Intel SDM
recommend to use LSS instead), thus it might be
rare case.
Oleg, could you review the uprobes patch?
Thank you,
---
Masami Hiramatsu (2):
kprobes: x86: Prohibit probing on exception masking instructions
uprobes: x86: Prohibit probing on MOV SS instruction
arch/x86/include/asm/insn.h | 18 ++++++++++++++++++
arch/x86/kernel/kprobes/core.c | 4 ++++
arch/x86/kernel/uprobes.c | 4 ++++
3 files changed, 26 insertions(+)
--
Masami Hiramatsu (Linaro) <mhiramat@xxxxxxxxxx>