labunixのブックマーク - はてなブックマーク

LKML: Tom Lendacky: [PATCH] x86/cpu, x86/pti: Do not enable PTI on AMD processors

[PATCH] x86/cpu, x86/pti: Do not enable PTI on AMD processors AMD processors are not subject to the types of attacks that the kernel page table isolation feature protects against. The AMD microarchitecture does not allow memory references, including speculative references, that access higher privileged data when running in a lesser privileged mode when that access would result in a page fault. Dis

labunix 2018/01/04

リンク

LKML: Linus Torvalds: Re: [GIT PULL] usercopy whitelisting for v4.15-rc1

[ This turned longer than it should have. I guess jet lag is a good thing ] On Tue, Nov 21, 2017 at 3:48 AM, Jason A. Donenfeld <Jason@zx2c4.com> wrote: > > It might be news to you that actually some security people scoff at > other security peoples' obsession with "security bugs". Heh. I'm not actually surprised. It's just that the public "look at this security bug" ones are the ones you see. > T

labunix 2017/11/30

リンク

[PATCH 3.10 16/16] mm: remove gup_flags FOLL_WRITE games from __get_user_pages()

[PATCH 3.10 16/16] mm: remove gup_flags FOLL_WRITE games from __get_user_pages() From: Linus Torvalds <torvalds@linux-foundation.org> commit 19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619 upstream. This is an ancient bug that was actually attempted to be fixed once (badly) by me eleven years ago in commit 4ceb5db9757a ("Fix get_user_pages() race for write access") but that was then undone due to probl em

labunix 2016/10/30

リンク

LKML: <1471274895@i2pmail ...: Fake Linus Torvalds' Key Found in the Wild, No More Short-IDs.

Fake Linus Torvalds' Key Found in the Wild, No More Short-IDs. It was well-known that PGP is vulnerable to short-ID collisions, and many experiments were done to demonstrate that. [0] Nevertheless, real attacks started in June, some developers found their fake keys with same name, em ail, and even "same" fake signatures by more fake keys in the wild, on the keyservers. [1] All these keys have same