In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
arm64: ptrace: Keep ‘orig_x0’ in-sync with x0 on syscall entry<\/p>\n
Commit e057b9477232 (“arm64: syscall: Ensure saved x0 is kept in-sync
\nwith tracer updates”) attempted to resolve a long-standing issue with
\nsyscall entry tracing, where a tracer is able to manipulate the first
\nsyscall argument without being subjected to seccomp or audit checking.<\/p>\n
Unfortunately, that fix was incomplete [1], as it failed to update
\n‘orig_x0’ between a tracer updating x0 during a seccomp ptrace exit
\n(SECCOMP_RET_TRACE) and the seccomp filter being re-evaluated.<\/p>\n
Rather than add hooks to the core seccomp code, instead move the
\nsynchronisation code into the ptrace GPR and syscall setting code so
\nthat ‘orig_x0’ is kept up to date with x0 whenever we’re stopped on the
\nsyscall entry path.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
arm64: ptrace: Keep ‘orig_x0’ in-sync with x0 on syscall entry<\/p>\n
Commit e057b9477232 (“arm64: syscall: Ensure saved x0 is kept in-sy<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-25756","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/25756","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=25756"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=25756"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=25756"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}