CVE-2002-1571

2006-01-2322:00:00

mitre

www.cve.org

6.1 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

30.3%

JSON

The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers, which could lead to an information leak on processors that do not clear all relevant SSE registers.

References

linux.bkbits.net:8080/linux-2.4/diffs/arch/i386/kernel/i387.c%401.6

search.luky.org/linux-kernel.2002/msg24003.html

search.luky.org/linux-kernel.2002/msg24992.html

www.cs.helsinki.fi/linux/linux-kernel/2002-15/0628.html

www.cs.helsinki.fi/linux/linux-kernel/2002-15/0760.html