Re: [PATCH 0/2] uprobes: x86: Reject probing MOV SS

From: Masami Hiramatsu
Date: Wed May 09 2018 - 18:26:10 EST


On Wed, 09 May 2018 14:36:27 +0000
Andy Lutomirski <luto@xxxxxxxxxx> wrote:

> On Wed, May 9, 2018 at 5:58 AM Masami Hiramatsu <mhiramat@xxxxxxxxxx> wrote:
>
> > Hi,
>
> > I found the CVE-2018-1087 and CVE-2018-8897 should
> > be related to kprobes and uprobes too, since both
> > are using #DB for single stepping.
>
>
> Seems okay to me. I doubt we have a security problem, but I can easily
> imagine that the probes wouldn't work right.

Sorry for confusion, yes, that will not be a security issue, since kprobes
and uprobes can be used only by root user.

Thank you,

--
Masami Hiramatsu <mhiramat@xxxxxxxxxx>