Re: CVE Request: Linux kernel execution in the early microcode loader.

[Florian Weimer <fweimer () redhat com>]

On 03/18/2015 07:22 PM, Daniel Micay wrote:

> Vanilla kernels don't have this separation even without
> vulnerabilities though, at without without using an LSM. Even with
> an LSM, I'm pretty sure there are ways around it unless you use
> seccomp too...

Sure, but some downstreams ship modified kernels would probably treat
this as a vulnerability (lack of enforcement of security controls etc.).

-- 
Florian Weimer / Red Hat Product Security