Unscored CVE-2002-1571 EUVD-2002-1552GHSA-g537-q8gc-5484

The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers, which could lead to an information leak on pro…

Published Jan 23, 2006 · Updated Aug 8, 2024 · Assigned by mitre

Description

The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers, which could lead to an information leak on processors that do not clear all relevant SSE registers.

References

[linux-kernel] 20020418 Re: SSE related security hole mailing-list
[linux-kernel] 20020417 Re: SSE related security hole mailing-list
[linux-kernel] 20020422 Re: SSE related security hole mailing-list
[linux-kernel] 20020417 SSE related security hole mailing-list
http://linux.bkbits.net:8080/linux-2.4/diffs/arch/i386/kernel/i387.c%401.6