Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Rafael Correa De Ysasi

#38445of 60,401
7.8Total CVSS
Vulnerabilities · 1
PT-2023-1383
2017-03-17
7.8
CVE-2023-0045
Linux
Linux Kernel
The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The `ib prctl set` function updates the Thread Information Flags (TIFs) for the task and updates the SPEC CTRL MSR on the function ` speculation ctrl update`, but the IBPB is only issued on the next schedule, when the TIF bits are checked. This leaves the victim vulnerable to values already injected on the BTB, prior to the prctl syscall.