Borislav Petkov

The issue concerns the Linux kernel, specifically with x86/CPU/AMD, where certain Zen4 client SoCs advertise the ability to use virtualized VMLOAD/VMSAVE instructions. However, using these instructions can cause a random host reboot. These instructions are not intended to be advertised on Zen4 client systems.

The issue is related to a bug in the x86/kexec component of the Linux kernel, where the call to `cc platform has()` triggers a fault and system crash if call depth tracking is active. This occurs because the GS segment has been reset by `load segments()` and `GS BASE` is now 0, but call depth tracking uses per-CPU variables to operate. The fix involves calling `cc platform has()` earlier in the function when GS is still valid.

The vulnerability is related to the `sys membarrier` function in the Linux kernel's `membarrier` component. It can cause a denial of service due to uncontrolled resource consumption. On some systems, `sys membarrier` can be very expensive, leading to overall slowdowns. To prevent this, a lock has been put on the path to serialize accesses and prevent the function from being called at too high a frequency.

قد يحدث سيناريو نادر لحدوث حالة «بانك» في النواة بسبب خطأ مطبعي في تعليمات النسخ السريع للسلاسل في نواة لينكس. تحدث هذه المشكلة عندما يكون هناك خطأ غير مصحح في السطر الأول من ذاكرة التخزين المؤقت لصفحة ما، ويقوم النواة بتنفيذ page copy من الصفحة التي تسبق تلك الصفحة مباشرةً. قد تستهلك تعليمات النسخ السريع للسلاسل خطأً في الذاكرة لا يمكن تصحيحه وتؤدي إلى حدوث استثناء فحص الجهاز (MCE). وقد أكدت شركة Intel أن هذا الخطأ ينطبق فقط على أجيال Skylake و Cascade Lake و Cooper Lake.

The issue is related to the `restore fpu checking` function in the Linux kernel, which does not properly clear pending exceptions before executing an EMMS instruction on AMD K7 and K8 platforms. This can be exploited by local users to cause a denial of service or potentially gain privileges through a crafted application.