CVE ID:	CVE-2006-1056
Description:	The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and 8th generation AuthenticAMD processors, only save/restore the FOP, FIP, and FDP x87 registers in FXSAVE/FXRSTOR when an exception is pending, which allows one process to determine portions of the state of floating point instructions of other processes, which can be leveraged to obtain sensitive information such as cryptographic keys. NOTE: this is the documented behavior of AMD64 processors, but it is inconsistent with Intel processors in a security-relevant fashion that was not addressed by the kernels.
Test IDs:	1.3.6.1.4.1.25623.1.0.57028   1.3.6.1.4.1.25623.1.0.56956   1.3.6.1.4.1.25623.1.0.56578
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2006-1056 1015966 http://securitytracker.com/id?1015966 17600 http://www.securityfocus.com/bid/17600 19715 http://secunia.com/advisories/19715 19724 http://secunia.com/advisories/19724 19735 http://secunia.com/advisories/19735 20060419 FreeBSD Security Advisory FreeBSD-SA-06:14.fpu http://www.securityfocus.com/archive/1/431341 20061113 VMSA-2006-0005 - VMware ESX Server 2.5.4 Upgrade Patch 1 http://www.securityfocus.com/archive/1/451419/100/200/threaded 20061113 VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4 http://www.securityfocus.com/archive/1/451404/100/0/threaded 20061113 VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2 http://www.securityfocus.com/archive/1/451417/100/200/threaded 20061113 VMSA-2006-0009 - VMware ESX Server 3.0.0 AMD fxsave/restore issue http://www.securityfocus.com/archive/1/451421/100/0/threaded 20398 http://secunia.com/advisories/20398 20671 http://secunia.com/advisories/20671 20716 http://secunia.com/advisories/20716 20914 http://secunia.com/advisories/20914 21035 http://secunia.com/advisories/21035 21136 http://secunia.com/advisories/21136 21465 http://secunia.com/advisories/21465 21983 http://secunia.com/advisories/21983 22417 http://secunia.com/advisories/22417 22875 http://secunia.com/advisories/22875 22876 http://secunia.com/advisories/22876 24746 http://www.osvdb.org/24746 24807 http://www.osvdb.org/24807 ADV-2006-1426 http://www.vupen.com/english/advisories/2006/1426 ADV-2006-1475 http://www.vupen.com/english/advisories/2006/1475 ADV-2006-2554 http://www.vupen.com/english/advisories/2006/2554 ADV-2006-4353 http://www.vupen.com/english/advisories/2006/4353 ADV-2006-4502 http://www.vupen.com/english/advisories/2006/4502 DSA-1097 http://www.debian.org/security/2006/dsa-1097 DSA-1103 http://www.debian.org/security/2006/dsa-1103 FEDORA-2006-423 http://lwn.net/Alerts/180820/ FreeBSD-SA-06:14 ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:14.fpu.asc RHSA-2006:0437 http://www.redhat.com/support/errata/RHSA-2006-0437.html RHSA-2006:0575 http://www.redhat.com/support/errata/RHSA-2006-0575.html RHSA-2006:0579 http://www.redhat.com/support/errata/RHSA-2006-0579.html SUSE-SA:2006:028 http://www.novell.com/linux/security/advisories/2006-05-31.html SUSE-SU-2014:0446 http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html USN-302-1 http://www.ubuntu.com/usn/usn-302-1 [linux-kernel] 20060419 RE: Linux 2.6.16.9 http://marc.info/?l=linux-kernel&m=114548768214478&w=2 amd-fpu-information-disclosure(25871) https://exchange.xforce.ibmcloud.com/vulnerabilities/25871 http://kb.vmware.com/kb/2533126 http://kb.vmware.com/kb/2533126 http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.9 http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.9 http://security.freebsd.org/advisories/FreeBSD-SA-06:14-amd.txt http://security.freebsd.org/advisories/FreeBSD-SA-06:14-amd.txt http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm http://www.vmware.com/download/esx/esx-213-200610-patch.html http://www.vmware.com/download/esx/esx-213-200610-patch.html http://www.vmware.com/download/esx/esx-254-200610-patch.html http://www.vmware.com/download/esx/esx-254-200610-patch.html https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187910 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187910 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187911 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187911 oval:org.mitre.oval:def:9995 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9995