CVEvulnerability
CVE-2006-1056
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2006-04-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and 8th generation AuthenticAMD processors, only save/restore the FOP, FIP, and FDP x87 registers in FXSAVE/FXRSTOR when an exception is pending, which allows one process to determine portions of the state of floating point instructions of other processes, which can be leveraged to obtain sensitive information such as cryptographic keys. NOTE: this is the documented behavior of AMD64 processors, but it is inconsistent with Intel processors in a security-relevant fashion that was not addressed by the kernels.
Affected configurations
• freebsd freebsd
• linux linux kernel (<= 2.6.16.8)
• linux linux kernel 2.6.0
• linux linux kernel 2.6.1
• linux linux kernel 2.6.2
• linux linux kernel 2.6.3
• linux linux kernel 2.6.4
• linux linux kernel 2.6.5
• linux linux kernel 2.6.6
• linux linux kernel 2.6.7
• linux linux kernel 2.6.8
• linux linux kernel 2.6.9
• linux linux kernel 2.6.10
• linux linux kernel 2.6.11
• linux linux kernel 2.6.11.1
• linux linux kernel 2.6.11.2
• linux linux kernel 2.6.11.3
• linux linux kernel 2.6.11.4
• linux linux kernel 2.6.11.5
• linux linux kernel 2.6.11.6
• linux linux kernel 2.6.11.7
• linux linux kernel 2.6.11.8
• linux linux kernel 2.6.11.9
• linux linux kernel 2.6.11.10
• linux linux kernel 2.6.11.11
• linux linux kernel 2.6.11.12
• linux linux kernel 2.6.12
• linux linux kernel 2.6.12.1
• linux linux kernel 2.6.12.2
• linux linux kernel 2.6.12.3
• linux linux kernel 2.6.12.4
• linux linux kernel 2.6.12.5
• linux linux kernel 2.6.12.6
• linux linux kernel 2.6.13
• linux linux kernel 2.6.13.1
• linux linux kernel 2.6.13.2
• linux linux kernel 2.6.13.3
• linux linux kernel 2.6.13.4
• linux linux kernel 2.6.14
• linux linux kernel 2.6.14.1
• linux linux kernel 2.6.14.2
• linux linux kernel 2.6.14.3
• linux linux kernel 2.6.14.4
• linux linux kernel 2.6.14.5
• linux linux kernel 2.6.14.6
• linux linux kernel 2.6.14.7
• linux linux kernel 2.6.15
• linux linux kernel 2.6.15.1
• linux linux kernel 2.6.15.2
• linux linux kernel 2.6.15.3
• linux linux kernel 2.6.15.4
• linux linux kernel 2.6.15.5
• linux linux kernel 2.6.15.6
• linux linux kernel 2.6.15.7
• linux linux kernel 2.6.16
• linux linux kernel 2.6.16.1
• linux linux kernel 2.6.16.2
• linux linux kernel 2.6.16.3
• linux linux kernel 2.6.16.4
• linux linux kernel 2.6.16.5
… and 4 more
Related
Weakness · not in database (1)
References
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:14.fpu.asc ftp.freebsd.org
- http://kb.vmware.com/kb/2533126 kb.vmware.com
- http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.9 kernel.org
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html lists.opensuse.org
- http://lwn.net/Alerts/180820/ lwn.net
- http://marc.info/?l=linux-kernel&m=114548768214478&w=2 marc.info
- http://secunia.com/advisories/19715 Patch, Vendor Advisory
- http://secunia.com/advisories/19724 Patch, Vendor Advisory
- http://secunia.com/advisories/19735 Vendor Advisory
- http://secunia.com/advisories/20398 Vendor Advisory
- http://secunia.com/advisories/20671 Vendor Advisory
- http://secunia.com/advisories/20716 Vendor Advisory
- http://secunia.com/advisories/20914 Vendor Advisory
- http://secunia.com/advisories/21035 Vendor Advisory
- http://secunia.com/advisories/21136 Vendor Advisory
- http://secunia.com/advisories/21465 Vendor Advisory
- http://secunia.com/advisories/21983 Vendor Advisory
- http://secunia.com/advisories/22417 Vendor Advisory
- http://secunia.com/advisories/22875 Vendor Advisory
- http://secunia.com/advisories/22876 Vendor Advisory
- http://security.freebsd.org/advisories/FreeBSD-SA-06:14-amd.txt security.freebsd.org
- http://securitytracker.com/id?1015966 securitytracker.com
- http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm support.avaya.com
- http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm support.avaya.com
- http://www.debian.org/security/2006/dsa-1097 www.debian.org
- http://www.debian.org/security/2006/dsa-1103 www.debian.org
- http://www.novell.com/linux/security/advisories/2006-05-31.html www.novell.com
- http://www.osvdb.org/24746 www.osvdb.org
- http://www.osvdb.org/24807 www.osvdb.org
- http://www.redhat.com/support/errata/RHSA-2006-0437.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2006-0575.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2006-0579.html www.redhat.com
- http://www.securityfocus.com/archive/1/431341 www.securityfocus.com
- http://www.securityfocus.com/archive/1/451404/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/451417/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/451419/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/451421/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/17600 Patch
- http://www.ubuntu.com/usn/usn-302-1 www.ubuntu.com
- http://www.vmware.com/download/esx/esx-213-200610-patch.html www.vmware.com
- http://www.vmware.com/download/esx/esx-254-200610-patch.html www.vmware.com
- http://www.vupen.com/english/advisories/2006/1426 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/1475 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/2554 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/4353 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/4502 Vendor Advisory
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187910 bugzilla.redhat.com
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187911 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25871 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9995 oval.cisecurity.org
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:14.fpu.asc ftp.freebsd.org
- http://kb.vmware.com/kb/2533126 kb.vmware.com
- http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.9 kernel.org
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html lists.opensuse.org
- http://lwn.net/Alerts/180820/ lwn.net
- http://marc.info/?l=linux-kernel&m=114548768214478&w=2 marc.info
- http://secunia.com/advisories/19715 Patch, Vendor Advisory
- http://secunia.com/advisories/19724 Patch, Vendor Advisory
- http://secunia.com/advisories/19735 Vendor Advisory
- http://secunia.com/advisories/20398 Vendor Advisory
- http://secunia.com/advisories/20671 Vendor Advisory
- http://secunia.com/advisories/20716 Vendor Advisory
- http://secunia.com/advisories/20914 Vendor Advisory
- http://secunia.com/advisories/21035 Vendor Advisory
- http://secunia.com/advisories/21136 Vendor Advisory
- http://secunia.com/advisories/21465 Vendor Advisory
- http://secunia.com/advisories/21983 Vendor Advisory
- http://secunia.com/advisories/22417 Vendor Advisory
- http://secunia.com/advisories/22875 Vendor Advisory
- http://secunia.com/advisories/22876 Vendor Advisory
- http://security.freebsd.org/advisories/FreeBSD-SA-06:14-amd.txt security.freebsd.org
- http://securitytracker.com/id?1015966 securitytracker.com
- http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm support.avaya.com
- http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm support.avaya.com
- http://www.debian.org/security/2006/dsa-1097 www.debian.org
- http://www.debian.org/security/2006/dsa-1103 www.debian.org
- http://www.novell.com/linux/security/advisories/2006-05-31.html www.novell.com
- http://www.osvdb.org/24746 www.osvdb.org
- http://www.osvdb.org/24807 www.osvdb.org
- http://www.redhat.com/support/errata/RHSA-2006-0437.html www.redhat.com