xen-kernel -- x86 task switch to VM86 mode mis-handled

The Xen Project reports: LDTR, just like TR, is purely a protected mode facility. Hence even when switching to a VM86 mode task, LDTR loading needs to follow protected mode semantics. This was violated by the code. On SVM AMD hardware: a malicious unprivileged guest process can escalate its...

Linux Kernel vm86 Syscall不能处理FPU异常本地拒绝服务漏洞

Linux Kernel是一款开源的Linux操作系统。 Linux Kernel VM86系统调用存在一个安全漏洞，在任务切换过程中存在不能处理FPU异常，允许本地攻击者可以利用漏洞使系统崩溃。 0 Linux Kernel 目前没有详细解决方案提供： https://kernel.org/ / This software is provided by the copyright owner "as is" and any expressed or implied warranties, including, but not limited to, the implied...

Vm86 - Syscall Task Switch Kernel Panic (Denial of Service) Privilege Escalation

Vm86 - Syscall Task Switch Kernel Panic Denial of Service Privilege Escalation Source: http://www.halfdog.net/Security/2013/Vm86SyscallTaskSwitchKernelPanic/ Introduction Problem description: The initial observation was, that the linux vm86 syscall, which allows to use the virtual-8086 mode from...

Vm86 - Syscall Task Switch Kernel Panic Denial of Service / Privilege Escalation

Source: http://www.halfdog.net/Security/2013/Vm86SyscallTaskSwitchKernelPanic/ Introduction Problem description: The initial observation was, that the linux vm86 syscall, which allows to use the virtual-8086 mode from userspace for emulating of old 8086 software as done with dosemu, was prone to...