*** This bug is a security vulnerability ***

Public security bug reported:

Logic error came from the following commit, looks to be introduced at
4.13.0-27:

commit d2e0236f395e876f5303fb5021e4fe6eea881402
Author: Tim Chen <tim.c.c...@linux.intel.com>
Date: Wed Nov 8 16:30:06 2017 -0800

    x86/entry: Use retpoline for syscall's indirect calls

$ git describe --contains d2e0236f395e876f5303fb5021e4fe6eea881402
Ubuntu-4.13.0-27.30~42

This patch was included in one of the proposed patchsets to mitigate
spectre, but was superceded in later ones which did not contain the
error, and did not land in the upstream kernel. It does not affect the
4.4 derived or earlier kernels.

** Affects: linux (Ubuntu)
     Importance: Critical
         Status: New

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1745564

Title:
  coding error in retpoline for system call entry in Ubuntu 4.13.0-31
  kernels

Status in linux package in Ubuntu:
  New

Bug description:
  Logic error came from the following commit, looks to be introduced at
  4.13.0-27:

  commit d2e0236f395e876f5303fb5021e4fe6eea881402
  Author: Tim Chen <tim.c.c...@linux.intel.com>
  Date: Wed Nov 8 16:30:06 2017 -0800

      x86/entry: Use retpoline for syscall's indirect calls

  $ git describe --contains d2e0236f395e876f5303fb5021e4fe6eea881402
  Ubuntu-4.13.0-27.30~42

  This patch was included in one of the proposed patchsets to mitigate
  spectre, but was superceded in later ones which did not contain the
  error, and did not land in the upstream kernel. It does not affect the
  4.4 derived or earlier kernels.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1745564/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to