kernel-packages team mailing list archive

[Tim Gardner <tim.gardner@xxxxxxxxxxxxx>]

Public bug reported:

Upstream is concerned about possible security vulnerabilities in VM86:
http://thread.gmane.org/gmane.linux.kernel/1991020

There are possible side effects to disabling VM86, e.g.,
(http://codesearch.debian.net/results/sys%2Fvm86.h) and
(http://codesearch.debian.net/results/asm%2Fvm86.h). Applications
including asm/vm86.h directly may not have an emulation fallback mode
and may therefore fail to run or build.

VM86 is also a dependency for some older 32 bit X drivers.

It seems the choice is to regress or orphan some 32 bit functionality,
or leave all 32 bit platform open to possible VM86 vulnerabilities.

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: Incomplete

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1473447

Title:
  linux: VM86 should be disabled

Status in linux package in Ubuntu:
  Incomplete

Bug description:
  Upstream is concerned about possible security vulnerabilities in VM86:
  http://thread.gmane.org/gmane.linux.kernel/1991020

  There are possible side effects to disabling VM86, e.g.,
  (http://codesearch.debian.net/results/sys%2Fvm86.h) and
  (http://codesearch.debian.net/results/asm%2Fvm86.h). Applications
  including asm/vm86.h directly may not have an emulation fallback mode
  and may therefore fail to run or build.

  VM86 is also a dependency for some older 32 bit X drivers.

  It seems the choice is to regress or orphan some 32 bit functionality,
  or leave all 32 bit platform open to possible VM86 vulnerabilities.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1473447/+subscriptions