[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20180903153641.GF27886@tassilo.jf.intel.com>
Date: Mon, 3 Sep 2018 08:36:41 -0700
From: Andi Kleen <ak@...ux.intel.com>
To: Wes Turner <wes.turner@...il.com>
Cc: Linus Torvalds <torvalds@...ux-foundation.org>,
"jsteckli@...zon.de" <jsteckli@...zon.de>,
David Woodhouse <dwmw@...zon.co.uk>,
Konrad Rzeszutek Wilk <konrad.wilk@...cle.com>,
"juerg.haefliger@....com" <juerg.haefliger@....com>,
"deepa.srinivasan@...cle.com" <deepa.srinivasan@...cle.com>,
Jim Mattson <jmattson@...gle.com>,
Andrew Cooper <andrew.cooper3@...rix.com>,
Linux Kernel Mailing List <linux-kernel@...r.kernel.org>,
Boris Ostrovsky <boris.ostrovsky@...cle.com>,
linux-mm <linux-mm@...ck.org>, Thomas Gleixner <tglx@...utronix.de>,
"joao.m.martins@...cle.com" <joao.m.martins@...cle.com>,
"pradeep.vincent@...cle.com" <pradeep.vincent@...cle.com>,
Khalid Aziz <khalid.aziz@...cle.com>,
"kanth.ghatraju@...cle.com" <kanth.ghatraju@...cle.com>,
Liran Alon <liran.alon@...cle.com>, Kees Cook <keescook@...gle.com>,
Kernel Hardening <kernel-hardening@...ts.openwall.com>,
"chris.hyser@...cle.com" <chris.hyser@...cle.com>,
Tyler Hicks <tyhicks@...onical.com>,
John Haxby <john.haxby@...cle.com>, Jon Masters <jcm@...hat.com>
Subject: Re: Redoing eXclusive Page Frame Ownership (XPFO) with isolated CPUs
in mind (for KVM to isolate its guests per CPU)
On Sat, Sep 01, 2018 at 06:33:22PM -0400, Wes Turner wrote:
> Speaking of pages and slowdowns,
> is there a better place to ask this question:
> From "'Turning Tables' shared page tables vuln":
> """
> 'New "Turning Tables" Technique Bypasses All Windows Kernel Mitigations'
> https://www.bleepingcomputer.com/news/security/new-turning-tables-technique-bypasses-all-windows-kernel-mitigations/
> > Furthermore, since the concept of page tables is also used by Apple and
> the Linux project, macOS and Linux are, in theory, also vulnerable to this
> technique, albeit the researchers have not verified such attacks, as of
> yet.
> Slides:
> https://cdn2.hubspot.net/hubfs/487909/Turning%20(Page)%20Tables_Slides.pdf
> Naturally, I took notice and decided to forward the latest scary headline
> to this list to see if this is already being addressed?
This essentially just says that if you can change page tables you can subvert kernels.
That's always been the case, always will be, I'm sure has been used forever by root kits,
and I don't know why anybody would pass it off as a "new attack".
-Andi
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
