In the Linux kernel, the following vulnerability has been resolved:
x86/bugs: Use code segment selector for VERW operand
Robert Gill reported below #GP in 32-bit mode when dosemu software was executing vm86() system call:
general protection fault: 0000 [#1] PREEMPT SMP CPU: 4 PID: 4610 Comm: dosemu.bin Not tainted 6.6.21-gentoo-x86 #1 Hardware name: Dell Inc. PowerEdge 1950/0H723K, BIOS 2.7.0 10/30/2010 EIP: restore_all_switch_stack+0xbe/0xcf EAX: 00000000 EBX: 00000000 ECX: 00000000 EDX: 00000000 ESI: 00000000 EDI: 00000000 EBP: 00000000 ESP: ff8affdc DS: 0000 ES: 0000 FS: 0000 GS: 0033 SS: 0068 EFLAGS: 00010046 CR0: 80050033 CR2: 00c2101c CR3: 04b6d000 CR4: 000406d0 Call Trace: show_regs+0x70/0x78 die_addr+0x29/0x70 exc_general_protection+0x13c/0x348 exc_bounds+0x98/0x98 handle_exception+0x14d/0x14d exc_bounds+0x98/0x98 restore_all_switch_stack+0xbe/0xcf exc_bounds+0x98/0x98 restore_all_switch_stack+0xbe/0xcf
This only happens in 32-bit mode when VERW based mitigations like MDS/RFDS are enabled. This is because segment registers with an arbitrary user value can result in #GP when executing VERW. Intel SDM vol. 2C documents the following behavior for VERW instruction:
#GP(0) - If a memory operand effective address is outside the CS, DS, ES, FS, or GS segment limit.
CLEAR_CPU_BUFFERS macro executes VERW instruction before returning to user space. Use %cs selector to reference VERW operand. This ensures VERW will not #GP for an arbitrary user %ds.
[ mingo: Fixed the SOB chain. ]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.230-223.885Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.173-118.169Upgrade perfUpgrade kernel-debuginfo-common-aarch64 | Mar 14, 2025 | Oct 29, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.119-129.201Upgrade kernel-modules-extraUpgrade kernelUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-devel | Mar 27, 2025 | Oct 29, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Dec 2, 2024 | Oct 29, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Feb 11, 2025 | Oct 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perf | Feb 11, 2025 | Oct 29, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-6.8.0-1024-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-1026-gcp-64kUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-oem-20.04bUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-133-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-134-generic-64kUpgrade linux-image-6.8.0-1026-gcpUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1024-nvidia-lowlatencyUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1072-nvidia-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1075-oracleUpgrade linux-image-intelUpgrade linux-image-nvidiaUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-56-lowlatency-64kUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-5.15.0-1070-ibmUpgrade linux-image-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-133-generic-lpaeUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1073-intel-iotgUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-5.15.0-133-genericUpgrade linux-image-6.8.0-56-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-57-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-5.15.0-133-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1060-gkeopUpgrade linux-image-5.15.0-1072-nvidiaUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04dUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1072-raspiUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-1022-oracle-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1081-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-5.15.0-1081-azureUpgrade linux-image-5.15.0-1078-awsUpgrade linux-image-gcpUpgrade linux-image-5.15.0-134-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1025-awsUpgrade linux-image-5.15.0-1075-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-azure-cvmUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1022-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1024-nvidiaUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.1-1018-realtimeUpgrade linux-image-6.8.0-56-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1008-gkeopUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1077-gcpUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-kvmUpgrade linux-image-gke-5.15Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-1024-nvidia-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-6.8.0-1021-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-133-lowlatencyUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-134-generic-lpaeUpgrade linux-image-6.8.0-56-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-aws | Feb 20, 2025 | Oct 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub