Re: CVE-2012-0217 Intel's sysret Kernel Privilege Escalation and FreeBSD 6.2/6.3

2012-08-06 Thread James
On Mon, Aug 6, 2012 at 8:08 AM, Bill Crisp wrote: > I gave it a try on a few servers, and saw a big increase in load on > the servers, most of the load comes from apache under normal > circumstances and it that load did go up a lot. I had to roll back > the patched kernel and the load went back

Re: CVE-2012-0217 Intel's sysret Kernel Privilege Escalation and FreeBSD 6.2/6.3

2012-08-06 Thread Bill Crisp
Thanks for the patch! I gave it a try on a few servers, and saw a big increase in load on the servers, most of the load comes from apache under normal circumstances and it that load did go up a lot. I had to roll back the patched kernel and the load went back to what it normally is. Did you expe

Re: CVE-2012-0217 Intel's sysret Kernel Privilege Escalation and FreeBSD 6.2/6.3

2012-07-31 Thread John Baldwin
On Wednesday, July 18, 2012 4:59:21 pm James wrote: > On Wed, Jul 18, 2012 at 3:26 PM, Bill Crisp wrote: > > > > Unfortunately I tried to put the code from the patch in place but there > > seems to be some missing functions in the header file and too many > > arguments to a function and some othe

Re: CVE-2012-0217 Intel's sysret Kernel Privilege Escalation and FreeBSD 6.2/6.3

2012-07-18 Thread James
On Wed, Jul 18, 2012 at 3:26 PM, Bill Crisp wrote: > > Unfortunately I tried to put the code from the patch in place but there > seems to be some missing functions in the header file and too many > arguments to a function and some other errors below: Hi Bill. Yes, the patch for >= FreeBSD 7 w

Re: CVE-2012-0217 Intel's sysret Kernel Privilege Escalation and FreeBSD 6.2/6.3

2012-07-18 Thread Bill Crisp
Xin, Thanks for the reply! Unfortunately I tried to put the code from the patch in place but there seems to be some missing functions in the header file and too many arguments to a function and some other errors below: ../../../amd64/amd64/trap.c: In function `syscall': ../../../amd64/amd64/trap

Re: CVE-2012-0217 Intel's sysret Kernel Privilege Escalation and FreeBSD 6.2/6.3

2012-07-13 Thread Arnaud Lacombe
Hi, On Fri, Jul 13, 2012 at 11:02 AM, John Baldwin wrote: > On Friday, July 13, 2012 10:42:04 am Poul-Henning Kamp wrote: >> In message <201207130831.59211@freebsd.org>, John Baldwin writes: >> >> >Every FreeBSD/amd64 kernel in existent is vulnerable. In truth, my > personal >> >opinion is t

Re: CVE-2012-0217 Intel's sysret Kernel Privilege Escalation and FreeBSD 6.2/6.3

2012-07-13 Thread Poul-Henning Kamp
In message <201207130831.59211@freebsd.org>, John Baldwin writes: >Every FreeBSD/amd64 kernel in existent is vulnerable. In truth, my personal >opinion is that Intel screwed up their implementation of that instruction >whereas AMD got it right, and we are merely working around Intel's CPU b

Re: CVE-2012-0217 Intel's sysret Kernel Privilege Escalation and FreeBSD 6.2/6.3

2012-07-13 Thread John Baldwin
On Friday, July 13, 2012 10:42:04 am Poul-Henning Kamp wrote: > In message <201207130831.59211@freebsd.org>, John Baldwin writes: > > >Every FreeBSD/amd64 kernel in existent is vulnerable. In truth, my personal > >opinion is that Intel screwed up their implementation of that instruction >

Re: CVE-2012-0217 Intel's sysret Kernel Privilege Escalation and FreeBSD 6.2/6.3

2012-07-13 Thread John Baldwin
On Thursday, July 12, 2012 12:36:07 pm Bill Crisp wrote: > Good Morning! > > This was also posted to the FreeBSD forums: > > I have been researching CVE-2012-0217 and while I have patched the kernels > on servers with 7.3/8.2 that I have, I would like to see if anyone knows > for sure if 6.2/6.3

Re: CVE-2012-0217 Intel's sysret Kernel Privilege Escalation and FreeBSD 6.2/6.3

2012-07-12 Thread Xin Li
On 07/12/12 09:36, Bill Crisp wrote: Good Morning! This was also posted to the FreeBSD forums: I have been researching CVE-2012-0217 and while I have patched the kernels on servers with 7.3/8.2 that I have, I would like to see if anyone knows for sure if 6.2/6.3 are also vulnerable? I am aware

CVE-2012-0217 Intel's sysret Kernel Privilege Escalation and FreeBSD 6.2/6.3

2012-07-12 Thread Bill Crisp
Good Morning! This was also posted to the FreeBSD forums: I have been researching CVE-2012-0217 and while I have patched the kernels on servers with 7.3/8.2 that I have, I would like to see if anyone knows for sure if 6.2/6.3 are also vulnerable? I am aware that those kernels are out of support f