Re: Re: CVE Request: More perf security fixes

[Petr Matousek <pmatouse () redhat com>]

On Tue, Jun 04, 2013 at 10:59:33AM -0700, Andi Kleen wrote:
> > 3. Information leak (??) via perf LBR filter 
>
> Leak + crash actually.
>
> > https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6e15eb3ba6c0249c9e8c783517d131b47db995ca
> >
> > commit 6e15eb3ba6c0249c9e8c783517d131b47db995ca
> > Author: Peter Zijlstra <a.p.zijlstra () chello nl>
> > Date:   Fri May 3 14:11:24 2013 +0200
> >
> >     perf/x86/intel/lbr: Fix LBR filter
> >     
> >     The LBR 'from' adddress is under full userspace control; ensure
> >     we validate it before reading from it.
>
> This patch is known broken and causes additional crashes.
> There's no updated patch for that so far.
>
> -Andi

-- 
Petr Matousek / Red Hat Security Response Team