linux-kernel - bug disabling NX (noexec=off)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <c090ad3c-1f2f-c148-dd44-a58df0788588@gmail.com>
Date:   Sat, 13 Apr 2019 22:53:52 +0200
From:   Xose Vazquez Perez <xose.vazquez@...il.com>
To:     LKML <linux-kernel@...r.kernel.org>, x86 team <x86@...nel.org>
Subject: bug disabling NX (noexec=off)

Hi,

Intel Core i3-2120 + kernel-5.0.7 x86_64 from Fedora:

[    0.000000] microcode: microcode updated early to revision 0x2e, date = 2018-04-10
[    0.000000] Linux version 5.0.7-300.fc30.x86_64 (mockbuild@...rnel04.phx2.fedoraproject.org) (gcc version 9.0.1 20190312 (Red Hat 9.0.1-0.10) (GCC)) #1 SMP Mon Apr 8 18:28:09 UTC 2019
[    0.000000] Command line: BOOT_IMAGE=(hd0,msdos1)/boot/vmlinuz-5.0.7-300.fc30.x86_64 root=UUID=ea93877a-9487-4416-9f32-9d1fba2a639a ro quiet audit=0 usb-storage.delay_use=0 net.ifnames=0
plymouth.enable=0 pti=off spectre_v2=off spectre_v2_user=off spec_store_bypass_disable=off l1tf=off noexec=off
[...]
[    0.000000] NX (Execute Disable) protection: disabled by kernel command line option
[    0.000000] ------------[ cut here ]------------
[    0.000000] attempted to set unsupported pgprot: 8000000000000163 bits: 8000000000000000 supported: 7fffffffffffffff
[    0.000000] WARNING: CPU: 0 PID: 0 at arch/x86/include/asm/pgtable.h:537 __early_set_fixmap+0xa2/0xff
[    0.000000] Modules linked in:
[    0.000000] CPU: 0 PID: 0 Comm: swapper Not tainted 5.0.7-300.fc30.x86_64 #1
[    0.000000] RIP: 0010:__early_set_fixmap+0xa2/0xff
[    0.000000] Code: ed be ff 49 21 cc 4c 39 e2 74 21 80 3d b8 a2 bb ff 00 75 18 4c 31 e2 48 c7 c7 68 b6 09 ac c6 05 a5 a2 bb ff 01 e8 ae ba 95 fe <0f> 0b 4c 89 e7 4c 09 ef ff 14 25 98 e2 22 ac 48 89
c6 48 89 df ff
[    0.000000] RSP: 0000:ffffffffac203de8 EFLAGS: 00010082 ORIG_RAX: 0000000000000000
[    0.000000] RAX: 0000000000000000 RBX: ffffffffac972000 RCX: 0000000000000078
[    0.000000] RDX: 0000000000000001 RSI: 0000000000000092 RDI: 0000000000000047
[    0.000000] RBP: ffffffffff200000 R08: 0000000000000001 R09: 0000000000000024
[    0.000000] R10: 0000000000000c1c R11: 0000000000000003 R12: 0000000000000163
[    0.000000] R13: 00000000000f0000 R14: 0000000000010000 R15: 0000000000000000
[    0.000000] FS:  0000000000000000(0000) GS:ffffffffac73a000(0000) knlGS:0000000000000000
[    0.000000] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[    0.000000] CR2: ffff888046212ff8 CR3: 00000000467de000 CR4: 00000000000406a0
[    0.000000] Call Trace:
[    0.000000]  ? __early_ioremap+0x10b/0x189
[    0.000000]  ? dmi_scan_machine+0xfe/0x209
[    0.000000]  ? setup_arch+0x436/0xc9f
[    0.000000]  ? start_kernel+0x65/0x519
[    0.000000]  ? secondary_startup_64+0xa4/0xb0
[    0.000000] random: get_random_bytes called from print_oops_end_marker+0x26/0x40 with crng_init=0
[    0.000000] ---[ end trace 0000000000000000 ]---
[    0.000000] SMBIOS 2.6 present.
[...]


The same happens in a T61 with an Intel Core 2 Duo T7300.


Thanks.