Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 8 Mar 2018 16:57:46 -0500
From:      Ed Maste <emaste@freebsd.org>
To:        Tycho Nightingale <tychon@freebsd.org>
Cc:        src-committers <src-committers@freebsd.org>, svn-src-all@freebsd.org,  svn-src-head@freebsd.org
Subject:   Re: svn commit: r328011 - in head/sys/amd64/vmm: amd intel
Message-ID:  <CAPyFy2BWYy8T1vbsLemxYKf4sqHhQu9YZ1iAJicweQLeGNk16w@mail.gmail.com>
In-Reply-To: <201801151837.w0FIb3R7098459@repo.freebsd.org>
References:  <201801151837.w0FIb3R7098459@repo.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On 15 January 2018 at 13:37, Tycho Nightingale <tychon@freebsd.org> wrote:
> Author: tychon
> Date: Mon Jan 15 18:37:03 2018
> New Revision: 328011
> URL: https://svnweb.freebsd.org/changeset/base/328011
>
> Log:
>   Provide some mitigation against CVE-2017-5715 by clearing registers
>   upon returning from the guest which aren't immediately clobbered by
>   the host.  This eradicates any remaining guest contents limiting their
>   usefulness in an exploit gadget.

Will you MFC this to stable/11?



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAPyFy2BWYy8T1vbsLemxYKf4sqHhQu9YZ1iAJicweQLeGNk16w>