mirror of
https://github.com/opnsense/src.git
synced 2026-02-13 07:44:48 -05:00
If %ss is loaded with a segment pointing to a non-present descriptor by the IRETD instruction, a kernel-mode #SS exception is generated. Resulting T_STKFLT trap must be checked against doreti_iret_fault location and handled, otherwise userspace may panic the kernel. Note that this is i386 variant of FreeBSD-SA-15:21.amd64, but unlike amd64, there is no swapgs on i386 and the issue is arguably not exploitable. Reported by: Maxime Villard <max@m00nbsd.net> Tested by: pho Sponsored by: The FreeBSD Foundation MFC after: 1 week |
||
|---|---|---|
| .. | ||
| acpica | ||
| bios | ||
| cloudabi32 | ||
| conf | ||
| i386 | ||
| ibcs2 | ||
| include | ||
| isa | ||
| linux | ||
| pci | ||
| xbox | ||
| Makefile | ||