In the Linux kernel, the following vulnerability has been resolved:
x86/bugs: Use code segment selector for VERW operand
Robert Gill reported below #GP in 32-bit mode when dosemu software was executing vm86() system call:
general protection fault: 0000 [#1] PREEMPT SMP CPU: 4 PID: 4610 Comm: dosemu.bin Not tainted 6.6.21-gentoo-x86 #1 Hardware name: Dell Inc. PowerEdge 1950/0H723K, BIOS 2.7.0 10/30/2010 EIP: restore_all_switch_stack+0xbe/0xcf EAX: 00000000 EBX: 00000000 ECX: 00000000 EDX: 00000000 ESI: 00000000 EDI: 00000000 EBP: 00000000 ESP: ff8affdc DS: 0000 ES: 0000 FS: 0000 GS: 0033 SS: 0068 EFLAGS: 00010046 CR0: 80050033 CR2: 00c2101c CR3: 04b6d000 CR4: 000406d0 Call Trace: show_regs+0x70/0x78 die_addr+0x29/0x70 exc_general_protection+0x13c/0x348 exc_bounds+0x98/0x98 handle_exception+0x14d/0x14d exc_bounds+0x98/0x98 restore_all_switch_stack+0xbe/0xcf exc_bounds+0x98/0x98 restore_all_switch_stack+0xbe/0xcf
This only happens in 32-bit mode when VERW based mitigations like MDS/RFDS are enabled. This is because segment registers with an arbitrary user value can result in #GP when executing VERW. Intel SDM vol. 2C documents the following behavior for VERW instruction:
#GP(0) - If a memory operand effective address is outside the CS, DS, ES, FS, or GS segment limit.
CLEAR_CPU_BUFFERS macro executes VERW instruction before returning to user space. Use %cs selector to reference VERW operand. This ensures VERW will not #GP for an arbitrary user %ds.
[ mingo: Fixed the SOB chain. ]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.230-223.885Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.173-118.169Upgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade kernel-tools | Mar 14, 2025 | Oct 29, 2024 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.119-129.201Upgrade kernel-libbpfUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64 | Mar 27, 2025 | Oct 29, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Dec 2, 2024 | Oct 29, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libs | Feb 11, 2025 | Oct 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Feb 11, 2025 | Oct 29, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-56-lowlatencyUpgrade linux-image-5.15.0-1073-intel-iotgUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1072-nvidia-lowlatencyUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1070-ibmUpgrade linux-image-6.8.0-56-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1060-gkeopUpgrade linux-image-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-intelUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-133-generic-lpaeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-57-genericUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-6.8.0-1024-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-5.15.0-133-genericUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-5.15.0-133-lowlatency-64kUpgrade linux-image-6.8.0-1026-gcp-64kUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-virtualUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-134-generic-64kUpgrade linux-image-6.8.0-1026-gcpUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1072-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1075-oracleUpgrade linux-image-5.15.0-133-generic-64kUpgrade linux-image-6.8.0-1024-nvidia-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-5.15.0-1081-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1021-gkeUpgrade linux-image-6.8.0-56-genericUpgrade linux-image-awsUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-gkeop-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-133-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-cvmUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1024-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1022-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1022-oracle-64kUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-56-generic-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.1-1018-realtimeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1008-gkeopUpgrade linux-image-6.8.0-1024-nvidia-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1077-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-kvmUpgrade linux-image-5.15.0-134-generic-lpaeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-5.15.0-1072-raspiUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-1025-awsUpgrade linux-image-oem-24.04bUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-134-genericUpgrade linux-image-5.15.0-1078-awsUpgrade linux-image-5.15.0-1081-azureUpgrade linux-image-5.15.0-1075-gkeUpgrade linux-image-5.15.0-1044-xilinx-zynqmp | Feb 20, 2025 | Oct 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub