[src/netbsd-6]: src/doc 1502

[snj <snj%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/cca2ada45830
branches:  netbsd-6
changeset: 777253:cca2ada45830
user:      snj <snj%NetBSD.org@localhost>
date:      Sat Sep 09 16:54:40 2017 +0000

description:
1502

diffstat:

 doc/CHANGES-6.2 |  10 +++++++++-
 1 files changed, 9 insertions(+), 1 deletions(-)

diffs (21 lines):

diff -r 655c4416b603 -r cca2ada45830 doc/CHANGES-6.2
--- a/doc/CHANGES-6.2   Sat Sep 09 16:53:36 2017 +0000
+++ b/doc/CHANGES-6.2   Sat Sep 09 16:54:40 2017 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-6.2,v 1.1.2.308 2017/09/04 16:05:39 snj Exp $
+# $NetBSD: CHANGES-6.2,v 1.1.2.309 2017/09/09 16:54:40 snj Exp $
 
 A complete list of changes from the 6.1 release until the 6.2 release:
 
@@ -20900,3 +20900,11 @@
        in %pstate and get kernel privileges on the hardware.
        [maxv, ticket #1501]
 
+sys/compat/linux32/arch/amd64/linux32_machdep.c        1.39
+
+
+       Fix a ring0 escalation vulnerability in compat_linux32 where the
+       index of %cs is controlled by userland, making it easy to trigger
+       the page fault and get kernel privileges.
+       [maxv, ticket #1502]
+