PT-2006-2091 · Freebsd+3 · Freebsd Kernel+3
Marcel Holtmann
·
Publicado
2006-04-20
·
Atualizado
2018-10-30
·
CVE-2006-1056
CVSS v2.0
2.1
Baixa
| Vetor | AV:L/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 2.6.16.9
FreeBSD kernel (affected versions not specified)
Description
The issue allows one process to determine portions of the state of floating point instructions of other processes, potentially leading to the disclosure of sensitive information such as cryptographic keys. This occurs because the kernels only save/restore certain x87 registers when an exception is pending on AMD64 and other 7th and 8th generation AuthenticAMD processors.
Recommendations
For Linux kernel versions prior to 2.6.16.9, update to version 2.6.16.9 or later to resolve the issue.
For the FreeBSD kernel, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Freebsd Kernel
Linux Kernel
Red Hat
Suse