]> www.infradead.org Git - users/jedix/linux-maple.git/commit
x86/kernel/traps.c: fix trace_die_notifier return value
authorKris Van Hees <kris.van.hees@oracle.com>
Wed, 18 Apr 2018 12:58:27 +0000 (15:58 +0300)
committerBrian Maly <brian.maly@oracle.com>
Wed, 2 May 2018 19:27:35 +0000 (15:27 -0400)
commita6afcaf329bbacc9bcd1e0324621fa2f05745dc3
tree4a30ed9d3a97755e907134a65fb9e0ffd5be76dc
parentb774d7a4e0fdfc06d3d4f5799792e459210ae33c
x86/kernel/traps.c: fix trace_die_notifier return value

When triggering a int3 directly, the trace_die_notifier() actually returns 1
(whereas all other notifiers return 0), and that 1 value was being interpreted
as an indicator that DTrace handled the trap and that emulation is needed.  The
codei, from that point on, took a branch that is only to be used when the trap
occurs in kernel code, which is not good when it was actually triggered from
userspace.

OraBug: 27895315
CVE: CVE-2018-8897

Signed-off-by: Kris Van Hees <kris.van.hees@oracle.com>
Reviewed-by: Boris Ostrovsky <boris.ostrovsky@oracle.com>
Signed-off-by: Mihai Carabas <mihai.carabas@oracle.com>
Signed-off-by: Brian Maly <brian.maly@oracle.com>
arch/x86/kernel/traps.c