CVE-2017-15537

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.13.5

Description The issue concerns the x86/fpu subsystem in the Linux kernel, which does not correctly handle attempts to set reserved bits in the xstate header via the ptrace() or rt sigreturn() system call when a processor supports the xsave feature but not the xsaves feature. This allows local users to read the FPU registers of other processes on the system.

Recommendations For Linux kernel versions prior to 4.13.5, update to version 4.13.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the ptrace() and rt sigreturn() system calls to minimize the risk of exploitation.