Information Disclosure in Linux Kernel and FreeBSD Kernel on AMD64 Processors

CVE-2006-1056

Summary

This vulnerability in the Linux kernel and FreeBSD kernel stems from improper handling of floating point registers on AMD64 processors. When an exception is pending, these kernels only save/restore certain x87 registers, which inadvertently allows one process to glean information about the floating point state of other processes. This could potentially expose sensitive information, including cryptographic keys, compromising system security. This behavior contrasts with the security mechanisms present in Intel processors, underscoring a critical inconsistency in the handling of floating point data across different hardware architectures.

References