kernel: signal return with invalid floating-point control
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Ubuntu on IBM z Systems |
Fix Released
|
High
|
Andy Whitcroft | ||
linux (Ubuntu) |
Fix Released
|
Undecided
|
Canonical Kernel Team | ||
Xenial |
Fix Released
|
Undecided
|
Unassigned | ||
Yakkety |
Fix Released
|
Undecided
|
Canonical Kernel Team |
Bug Description
Please backport:
commit bcf4dd5f9ee096b
Author: Martin Schwidefsky <email address hidden>
Date: Mon Jun 27 17:06:45 2016 +0200
s390: fix test_fp_ctl inline assembly contraints
The test_fp_ctl function is used to test if a given value is a valid
floating-point control. The inline assembly in test_fp_ctl uses an
incorrect constraint for the 'orig_fpc' variable. If the compiler
chooses the same register for 'fpc' and 'orig_fpc' the test_fp_ctl()
function always returns true. This allows user space to trigger
kernel oopses with invalid floating-point control values on the
signal stack.
This problem has been introduced with git commit 4725c86055f5bbdcdf
"s390: fix save and restore of the floating-
Cc: <email address hidden> # v3.13+
Reviewed-by: Heiko Carstens <email address hidden>
Signed-off-by: Martin Schwidefsky <email address hidden>
tags: | added: architecture-s39064 bugnameltc-143266 severity-high targetmilestone-inin1604 |
Changed in ubuntu: | |
assignee: | nobody → Skipper Bug Screeners (skipper-screen-team) |
affects: | ubuntu → linux (Ubuntu) |
Changed in ubuntu-z-systems: | |
assignee: | nobody → Andy Whitcroft (apw) |
Changed in ubuntu-z-systems: | |
status: | New → In Progress |
importance: | Undecided → High |
Changed in linux (Ubuntu Xenial): | |
status: | In Progress → Fix Committed |
Changed in ubuntu-z-systems: | |
status: | In Progress → Fix Committed |
Changed in ubuntu-z-systems: | |
status: | Fix Committed → Fix Released |
no longer affects: | linux |
https:/ /lists. ubuntu. com/archives/ kernel- team/2016- July/078742. html