x86-64.net

Processor vulnerability

CVE-2013-6885

Locked instructions on write-combined memory can hang AMD family 16h models 00h to 0Fh; Linux sets a bit of LS_CFG to avoid it.

Name
Erratum 793
Vulnerability
AMD processor errata
Kind
Other
CVE published
2013-11-29 CVE record
On AMD family 16h processors of models 00h to 0Fh, the Jaguar cores, the microcode does not handle the interaction between locked instructions and memory of the write-combining type properly, and a crafted program can hang the system. AMD’s revision guide lists it as erratum 793. Linux 7.3 sets bit 15 of MSR_AMD64_LS_CFG on those models at boot.

Affected processors

1 of the 1 microarchitectures listed are affected in all or some of their models.

What the sources say of each microarchitecture.
MicroarchitectureStatusDetailSource
JaguarAffectedLinux 7.3 applies the workaround to family 16h models 00h-0FhLinux 7.3

Mitigations

  • Kernel: Linux sets bit 15 of MSR_AMD64_LS_CFG on family 16h models 00h-0Fh. Instructions: WRMSR. Source.

Sources

  1. CVE record CVE-2013-6885
  2. Linux 7.3 arch/x86/kernel/cpu/amd.c: erratum 793