PT-2006-2091 · Freebsd+3 · Freebsd Kernel+3
Marcel Holtmann
·
Published
2006-04-20
·
Updated
2018-10-30
·
CVE-2006-1056
CVSS v2.0
2.1
Low
| Vector | AV:L/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 2.6.16.9
FreeBSD kernel (affected versions not specified)
Description
The issue allows one process to determine portions of the state of floating point instructions of other processes, potentially leading to the disclosure of sensitive information such as cryptographic keys. This occurs because the kernels only save/restore certain x87 registers when an exception is pending on AMD64 and other 7th and 8th generation AuthenticAMD processors.
Recommendations
For Linux kernel versions prior to 2.6.16.9, update to version 2.6.16.9 or later to resolve the issue.
For the FreeBSD kernel, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Freebsd Kernel
Linux Kernel
Red Hat
Suse