kernel-packages team mailing list archive
-
kernel-packages team
-
Mailing list archive
-
Message #94467
[Bug 1400314] Re: CVE-2014-8134
CVE-2014-8134
** Also affects: linux (Ubuntu Vivid)
Importance: Undecided
Status: New
** Also affects: linux-fsl-imx51 (Ubuntu Vivid)
Importance: Undecided
Status: New
** Also affects: linux-mvl-dove (Ubuntu Vivid)
Importance: Undecided
Status: New
** Also affects: linux-ec2 (Ubuntu Vivid)
Importance: Undecided
Status: New
** Also affects: linux-ti-omap4 (Ubuntu Vivid)
Importance: Undecided
Status: New
** Also affects: linux-lts-backport-maverick (Ubuntu Vivid)
Importance: Undecided
Status: New
** Also affects: linux-lts-backport-natty (Ubuntu Vivid)
Importance: Undecided
Status: New
** Also affects: linux (Ubuntu Utopic)
Importance: Undecided
Status: New
** Also affects: linux-fsl-imx51 (Ubuntu Utopic)
Importance: Undecided
Status: New
** Also affects: linux-mvl-dove (Ubuntu Utopic)
Importance: Undecided
Status: New
** Also affects: linux-ec2 (Ubuntu Utopic)
Importance: Undecided
Status: New
** Also affects: linux-ti-omap4 (Ubuntu Utopic)
Importance: Undecided
Status: New
** Also affects: linux-lts-backport-maverick (Ubuntu Utopic)
Importance: Undecided
Status: New
** Also affects: linux-lts-backport-natty (Ubuntu Utopic)
Importance: Undecided
Status: New
** Also affects: linux (Ubuntu Trusty)
Importance: Undecided
Status: New
** Also affects: linux-fsl-imx51 (Ubuntu Trusty)
Importance: Undecided
Status: New
** Also affects: linux-mvl-dove (Ubuntu Trusty)
Importance: Undecided
Status: New
** Also affects: linux-ec2 (Ubuntu Trusty)
Importance: Undecided
Status: New
** Also affects: linux-ti-omap4 (Ubuntu Trusty)
Importance: Undecided
Status: New
** Also affects: linux-lts-backport-maverick (Ubuntu Trusty)
Importance: Undecided
Status: New
** Also affects: linux-lts-backport-natty (Ubuntu Trusty)
Importance: Undecided
Status: New
** Also affects: linux (Ubuntu Precise)
Importance: Undecided
Status: New
** Also affects: linux-fsl-imx51 (Ubuntu Precise)
Importance: Undecided
Status: New
** Also affects: linux-mvl-dove (Ubuntu Precise)
Importance: Undecided
Status: New
** Also affects: linux-ec2 (Ubuntu Precise)
Importance: Undecided
Status: New
** Also affects: linux-ti-omap4 (Ubuntu Precise)
Importance: Undecided
Status: New
** Also affects: linux-lts-backport-maverick (Ubuntu Precise)
Importance: Undecided
Status: New
** Also affects: linux-lts-backport-natty (Ubuntu Precise)
Importance: Undecided
Status: New
** Also affects: linux (Ubuntu Lucid)
Importance: Undecided
Status: New
** Also affects: linux-fsl-imx51 (Ubuntu Lucid)
Importance: Undecided
Status: New
** Also affects: linux-mvl-dove (Ubuntu Lucid)
Importance: Undecided
Status: New
** Also affects: linux-ec2 (Ubuntu Lucid)
Importance: Undecided
Status: New
** Also affects: linux-ti-omap4 (Ubuntu Lucid)
Importance: Undecided
Status: New
** Also affects: linux-lts-backport-maverick (Ubuntu Lucid)
Importance: Undecided
Status: New
** Also affects: linux-lts-backport-natty (Ubuntu Lucid)
Importance: Undecided
Status: New
** Changed in: linux-lts-trusty (Ubuntu Trusty)
Status: New => Invalid
** Changed in: linux-lts-trusty (Ubuntu Lucid)
Status: New => Invalid
** Changed in: linux-lts-trusty (Ubuntu Vivid)
Status: New => Invalid
** Changed in: linux-lts-trusty (Ubuntu Utopic)
Status: New => Invalid
** Changed in: linux-armadaxp (Ubuntu Trusty)
Status: New => Invalid
** Changed in: linux-armadaxp (Ubuntu Lucid)
Status: New => Invalid
** Changed in: linux-armadaxp (Ubuntu Vivid)
Status: New => Invalid
** Changed in: linux-armadaxp (Ubuntu Utopic)
Status: New => Invalid
** Changed in: linux-lts-utopic (Ubuntu Precise)
Status: New => Invalid
** Changed in: linux-lts-utopic (Ubuntu Lucid)
Status: New => Invalid
** Changed in: linux-lts-utopic (Ubuntu Vivid)
Status: New => Invalid
** Changed in: linux-lts-utopic (Ubuntu Utopic)
Status: New => Invalid
** Changed in: linux-ec2 (Ubuntu Precise)
Status: New => Invalid
** Changed in: linux-ec2 (Ubuntu Trusty)
Status: New => Invalid
** Changed in: linux-ec2 (Ubuntu Vivid)
Status: New => Invalid
** Changed in: linux-ec2 (Ubuntu Utopic)
Status: New => Invalid
** Changed in: linux-lts-quantal (Ubuntu Trusty)
Status: New => Invalid
** Changed in: linux-lts-quantal (Ubuntu Lucid)
Status: New => Invalid
** Changed in: linux-lts-quantal (Ubuntu Vivid)
Status: New => Invalid
** Changed in: linux-lts-quantal (Ubuntu Utopic)
Status: New => Invalid
** Changed in: linux-mvl-dove (Ubuntu Precise)
Status: New => Invalid
** Changed in: linux-mvl-dove (Ubuntu Trusty)
Status: New => Invalid
** Changed in: linux-mvl-dove (Ubuntu Vivid)
Status: New => Invalid
** Changed in: linux-mvl-dove (Ubuntu Utopic)
Status: New => Invalid
** Changed in: linux-lts-saucy (Ubuntu Trusty)
Status: New => Invalid
** Changed in: linux-lts-saucy (Ubuntu Lucid)
Status: New => Invalid
** Changed in: linux-lts-saucy (Ubuntu Vivid)
Status: New => Invalid
** Changed in: linux-lts-saucy (Ubuntu Utopic)
Status: New => Invalid
** Changed in: linux-ti-omap4 (Ubuntu Trusty)
Status: New => Invalid
** Changed in: linux-ti-omap4 (Ubuntu Lucid)
Status: New => Invalid
** Changed in: linux-ti-omap4 (Ubuntu Vivid)
Status: New => Invalid
** Changed in: linux-ti-omap4 (Ubuntu Utopic)
Status: New => Invalid
** Changed in: linux-fsl-imx51 (Ubuntu Precise)
Status: New => Invalid
** Changed in: linux-fsl-imx51 (Ubuntu Trusty)
Status: New => Invalid
** Changed in: linux-fsl-imx51 (Ubuntu Vivid)
Status: New => Invalid
** Changed in: linux-fsl-imx51 (Ubuntu Utopic)
Status: New => Invalid
** Changed in: linux-lts-raring (Ubuntu Trusty)
Status: New => Invalid
** Changed in: linux-lts-raring (Ubuntu Lucid)
Status: New => Invalid
** Changed in: linux-lts-raring (Ubuntu Vivid)
Status: New => Invalid
** Changed in: linux-lts-raring (Ubuntu Utopic)
Status: New => Invalid
** Description changed:
- Placeholder
+ paravirt_enabled has the following effects: - Disables the F00F bug
+ workaround warning. There is no F00F bug workaround any more because
+ Linux's standard IDT handling already works around the F00F bug, but
+ the warning still exists. This is only cosmetic, and, in any event,
+ there is no such thing as KVM on a CPU with the F00F bug. - Disables
+ 32-bit APM BIOS detection. On a KVM paravirt system, there should be
+ no APM BIOS anyway. - Disables tboot. I think that the tboot code
+ should check the CPUID hypervisor bit directly if it matters. -
+ paravirt_enabled disables espfix32. espfix32 should *not* be disabled
+ under KVM paravirt. The last point is the purpose of this patch. It
+ fixes a leak of the high 16 bits of the kernel stack address on 32-bit
+ KVM paravirt guests. While I'm at it, this removes pv_info setup from
+ kvmclock. That code seems to serve no purpose.
** Changed in: linux-lts-trusty (Ubuntu Precise)
Importance: Undecided => High
** Changed in: linux-lts-trusty (Ubuntu Trusty)
Importance: Undecided => High
** Changed in: linux-lts-trusty (Ubuntu Lucid)
Importance: Undecided => High
** Changed in: linux-lts-trusty (Ubuntu Vivid)
Importance: Undecided => High
** Changed in: linux-lts-trusty (Ubuntu Utopic)
Importance: Undecided => High
** Changed in: linux-armadaxp (Ubuntu Precise)
Importance: Undecided => High
** Changed in: linux-armadaxp (Ubuntu Trusty)
Importance: Undecided => High
** Changed in: linux-armadaxp (Ubuntu Lucid)
Importance: Undecided => High
** Changed in: linux-armadaxp (Ubuntu Vivid)
Importance: Undecided => High
** Changed in: linux-armadaxp (Ubuntu Utopic)
Importance: Undecided => High
** Changed in: linux-lts-utopic (Ubuntu Precise)
Importance: Undecided => High
** Changed in: linux-lts-utopic (Ubuntu Trusty)
Importance: Undecided => High
** Changed in: linux-lts-utopic (Ubuntu Lucid)
Importance: Undecided => High
** Changed in: linux-lts-utopic (Ubuntu Vivid)
Importance: Undecided => High
** Changed in: linux-lts-utopic (Ubuntu Utopic)
Importance: Undecided => High
** Changed in: linux-ec2 (Ubuntu Precise)
Importance: Undecided => High
** Changed in: linux-ec2 (Ubuntu Trusty)
Importance: Undecided => High
** Changed in: linux-ec2 (Ubuntu Lucid)
Importance: Undecided => High
** Changed in: linux-ec2 (Ubuntu Vivid)
Importance: Undecided => High
** Changed in: linux-ec2 (Ubuntu Utopic)
Importance: Undecided => High
** Changed in: linux-lts-quantal (Ubuntu Precise)
Importance: Undecided => High
** Changed in: linux-lts-quantal (Ubuntu Trusty)
Importance: Undecided => High
** Changed in: linux-lts-quantal (Ubuntu Lucid)
Importance: Undecided => High
** Changed in: linux-lts-quantal (Ubuntu Vivid)
Importance: Undecided => High
** Changed in: linux-lts-quantal (Ubuntu Utopic)
Importance: Undecided => High
** Changed in: linux-mvl-dove (Ubuntu Precise)
Importance: Undecided => High
** Changed in: linux-mvl-dove (Ubuntu Trusty)
Importance: Undecided => High
** Changed in: linux-mvl-dove (Ubuntu Lucid)
Status: New => Invalid
** Changed in: linux-mvl-dove (Ubuntu Lucid)
Importance: Undecided => High
** Changed in: linux-mvl-dove (Ubuntu Vivid)
Importance: Undecided => High
** Changed in: linux-mvl-dove (Ubuntu Utopic)
Importance: Undecided => High
** Changed in: linux-lts-saucy (Ubuntu Precise)
Importance: Undecided => High
** Changed in: linux-lts-saucy (Ubuntu Trusty)
Importance: Undecided => High
** Changed in: linux-lts-saucy (Ubuntu Lucid)
Importance: Undecided => High
** Changed in: linux-lts-saucy (Ubuntu Vivid)
Importance: Undecided => High
** Changed in: linux-lts-saucy (Ubuntu Utopic)
Importance: Undecided => High
** Changed in: linux (Ubuntu Precise)
Importance: Undecided => High
** Changed in: linux (Ubuntu Trusty)
Importance: Undecided => High
** Changed in: linux (Ubuntu Lucid)
Importance: Undecided => High
** Changed in: linux (Ubuntu Vivid)
Importance: Undecided => High
** Changed in: linux (Ubuntu Utopic)
Importance: Undecided => High
** Changed in: linux-ti-omap4 (Ubuntu Precise)
Importance: Undecided => High
** Changed in: linux-ti-omap4 (Ubuntu Trusty)
Importance: Undecided => High
** Changed in: linux-ti-omap4 (Ubuntu Lucid)
Importance: Undecided => High
** Changed in: linux-ti-omap4 (Ubuntu Vivid)
Importance: Undecided => High
** Changed in: linux-ti-omap4 (Ubuntu Utopic)
Importance: Undecided => High
** Changed in: linux-fsl-imx51 (Ubuntu Precise)
Importance: Undecided => High
** Changed in: linux-fsl-imx51 (Ubuntu Trusty)
Importance: Undecided => High
** Changed in: linux-fsl-imx51 (Ubuntu Lucid)
Status: New => Invalid
** Changed in: linux-fsl-imx51 (Ubuntu Lucid)
Importance: Undecided => High
** Changed in: linux-fsl-imx51 (Ubuntu Vivid)
Importance: Undecided => High
** Changed in: linux-fsl-imx51 (Ubuntu Utopic)
Importance: Undecided => High
** Changed in: linux-lts-raring (Ubuntu Precise)
Importance: Undecided => High
** Changed in: linux-lts-raring (Ubuntu Trusty)
Importance: Undecided => High
** Changed in: linux-lts-raring (Ubuntu Lucid)
Importance: Undecided => High
** Changed in: linux-lts-raring (Ubuntu Vivid)
Importance: Undecided => High
** Changed in: linux-lts-raring (Ubuntu Utopic)
Importance: Undecided => High
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1400314
Title:
CVE-2014-8134
Status in linux package in Ubuntu:
New
Status in linux-armadaxp package in Ubuntu:
Invalid
Status in linux-ec2 package in Ubuntu:
Invalid
Status in linux-fsl-imx51 package in Ubuntu:
Invalid
Status in linux-lts-backport-maverick package in Ubuntu:
New
Status in linux-lts-backport-natty package in Ubuntu:
New
Status in linux-lts-quantal package in Ubuntu:
Invalid
Status in linux-lts-raring package in Ubuntu:
Invalid
Status in linux-lts-saucy package in Ubuntu:
Invalid
Status in linux-lts-trusty package in Ubuntu:
Invalid
Status in linux-lts-utopic package in Ubuntu:
Invalid
Status in linux-mvl-dove package in Ubuntu:
Invalid
Status in linux-ti-omap4 package in Ubuntu:
Invalid
Status in linux source package in Lucid:
New
Status in linux-armadaxp source package in Lucid:
Invalid
Status in linux-ec2 source package in Lucid:
New
Status in linux-fsl-imx51 source package in Lucid:
Invalid
Status in linux-lts-backport-maverick source package in Lucid:
New
Status in linux-lts-backport-natty source package in Lucid:
New
Status in linux-lts-quantal source package in Lucid:
Invalid
Status in linux-lts-raring source package in Lucid:
Invalid
Status in linux-lts-saucy source package in Lucid:
Invalid
Status in linux-lts-trusty source package in Lucid:
Invalid
Status in linux-lts-utopic source package in Lucid:
Invalid
Status in linux-mvl-dove source package in Lucid:
Invalid
Status in linux-ti-omap4 source package in Lucid:
Invalid
Status in linux source package in Precise:
New
Status in linux-armadaxp source package in Precise:
New
Status in linux-ec2 source package in Precise:
Invalid
Status in linux-fsl-imx51 source package in Precise:
Invalid
Status in linux-lts-backport-maverick source package in Precise:
New
Status in linux-lts-backport-natty source package in Precise:
New
Status in linux-lts-quantal source package in Precise:
New
Status in linux-lts-raring source package in Precise:
New
Status in linux-lts-saucy source package in Precise:
New
Status in linux-lts-trusty source package in Precise:
New
Status in linux-lts-utopic source package in Precise:
Invalid
Status in linux-mvl-dove source package in Precise:
Invalid
Status in linux-ti-omap4 source package in Precise:
New
Status in linux source package in Trusty:
New
Status in linux-armadaxp source package in Trusty:
Invalid
Status in linux-ec2 source package in Trusty:
Invalid
Status in linux-fsl-imx51 source package in Trusty:
Invalid
Status in linux-lts-backport-maverick source package in Trusty:
New
Status in linux-lts-backport-natty source package in Trusty:
New
Status in linux-lts-quantal source package in Trusty:
Invalid
Status in linux-lts-raring source package in Trusty:
Invalid
Status in linux-lts-saucy source package in Trusty:
Invalid
Status in linux-lts-trusty source package in Trusty:
Invalid
Status in linux-lts-utopic source package in Trusty:
New
Status in linux-mvl-dove source package in Trusty:
Invalid
Status in linux-ti-omap4 source package in Trusty:
Invalid
Status in linux source package in Utopic:
New
Status in linux-armadaxp source package in Utopic:
Invalid
Status in linux-ec2 source package in Utopic:
Invalid
Status in linux-fsl-imx51 source package in Utopic:
Invalid
Status in linux-lts-backport-maverick source package in Utopic:
New
Status in linux-lts-backport-natty source package in Utopic:
New
Status in linux-lts-quantal source package in Utopic:
Invalid
Status in linux-lts-raring source package in Utopic:
Invalid
Status in linux-lts-saucy source package in Utopic:
Invalid
Status in linux-lts-trusty source package in Utopic:
Invalid
Status in linux-lts-utopic source package in Utopic:
Invalid
Status in linux-mvl-dove source package in Utopic:
Invalid
Status in linux-ti-omap4 source package in Utopic:
Invalid
Status in linux source package in Vivid:
New
Status in linux-armadaxp source package in Vivid:
Invalid
Status in linux-ec2 source package in Vivid:
Invalid
Status in linux-fsl-imx51 source package in Vivid:
Invalid
Status in linux-lts-backport-maverick source package in Vivid:
New
Status in linux-lts-backport-natty source package in Vivid:
New
Status in linux-lts-quantal source package in Vivid:
Invalid
Status in linux-lts-raring source package in Vivid:
Invalid
Status in linux-lts-saucy source package in Vivid:
Invalid
Status in linux-lts-trusty source package in Vivid:
Invalid
Status in linux-lts-utopic source package in Vivid:
Invalid
Status in linux-mvl-dove source package in Vivid:
Invalid
Status in linux-ti-omap4 source package in Vivid:
Invalid
Bug description:
paravirt_enabled has the following effects: - Disables the F00F bug
workaround warning. There is no F00F bug workaround any more
because Linux's standard IDT handling already works around the F00F
bug, but the warning still exists. This is only cosmetic, and, in
any event, there is no such thing as KVM on a CPU with the F00F bug.
- Disables 32-bit APM BIOS detection. On a KVM paravirt system,
there should be no APM BIOS anyway. - Disables tboot. I think that
the tboot code should check the CPUID hypervisor bit directly if it
matters. - paravirt_enabled disables espfix32. espfix32 should *not*
be disabled under KVM paravirt. The last point is the purpose of
this patch. It fixes a leak of the high 16 bits of the kernel stack
address on 32-bit KVM paravirt guests. While I'm at it, this removes
pv_info setup from kvmclock. That code seems to serve no purpose.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1400314/+subscriptions
References