Description
Linux kernel does not properly save or restore EFLAGS during a context switch, or reset the flags when creating new threads, which allows local users to cause a denial of service (process crash), as demonstrated using a process that sets the Alignment Check flag (EFLAGS 0x40000), which triggers a SIGBUS in other processes that have an unaligned access.
References
- SUSE-SA:2006:079 vendor-advisory
- 23361 third-party-advisory
- 23593 third-party-advisory
- 23384 third-party-advisory
- 21851 vdb-entry
- http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=47a5c6fa0e204a2b63309c648bb2fde36836c826
- 23474 third-party-advisory
- 20070615 rPSA-2007-0124-1 kernel xen mailing-list
- MDKSA-2007:002 vendor-advisory
- USN-395-1 vendor-advisory
- 25691 third-party-advisory