[lkml]   [2018]   [Feb]   [4]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
Subject[PATCH v2 0/3] x86/entry: Clear registers to sanitize speculative usages
Changes since v1 [1]:
* Move CLEAR_REGS_EXTRA_NOSPEC before TRACE_IRQS_OFF to protect tracing
users (Andy)



At entry userspace may have populated callee saved registers with values
that could be useful in a speculative execution attack. Clear them to
minimize the kernel's attack surface.

Note, this is done to make it harder to find / manipulate exploitable
sequences in the kernel.

The clearing is limited to the 64-bit 'extra' registers since those are
the most likely to survive with user populated values deep into the call
chain. Normal register pressure likely clobbers values in the lower
registers and the 32-bit case.

As for cycle impact on my Sandy Bridge test system it can handle the xor
sequence at 3.5 instructions per cycle.


Andi Kleen (2):
x86/entry: Clear registers for 64bit exceptions/interrupts
x86/entry: Clear registers for compat syscalls

Dan Williams (1):
x86/entry: Clear extra registers beyond syscall arguments for 64bit kernels

arch/x86/entry/calling.h | 17 +++++++++++++++++
arch/x86/entry/entry_64.S | 6 ++++++
arch/x86/entry/entry_64_compat.S | 3 +++
3 files changed, 26 insertions(+)

 \ /
  Last update: 2018-02-04 18:53    [W:0.131 / U:1.008 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site