From owner-freebsd-hackers@FreeBSD.ORG Mon Aug 6 18:20:44 2012 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 64E0610656F3 for ; Mon, 6 Aug 2012 18:20:44 +0000 (UTC) (envelope-from jamebus@gmail.com) Received: from mail-lb0-f182.google.com (mail-lb0-f182.google.com [209.85.217.182]) by mx1.freebsd.org (Postfix) with ESMTP id D65AD8FC14 for ; Mon, 6 Aug 2012 18:20:43 +0000 (UTC) Received: by lbbgk8 with SMTP id gk8so1057452lbb.13 for ; Mon, 06 Aug 2012 11:20:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type; bh=QDqAvZxpJVQ9mgg50ShQ0lSCE5SIiMxjbHLHwqp2kQ4=; b=ikfGhYE46GaNn1EUFjpLkuXOVSry5r9BQr0xj4n7s2+M5ZJPFw0uFZnzuVVP3TX7yv Z5439b9UCLD9GQGe5Xi1oSeVLbNBpfPS2BQsdJaGnwxuS0IanCsQxuDRmsr2BdLzHTFl LKMu1o4jnfbLKovLavDq52rSQk+E00D8iJoe+0kbqtM40uR1S1X3MmJu8UPbbRrl0rEq ErZ1ZIkWfYFXUkg7oHaD7q6geCMHRnwRHhTeK4cKSctvuiAK1LRDJcMN/YOVyhMc0rjX Uwk5lc2pRYwbupRAqKp6KLerlVO8HM2r1C5motFXRT2SCUbGJs3SsCMWKo4zHnyFjIN4 Ho4g== MIME-Version: 1.0 Received: by 10.112.36.195 with SMTP id s3mr4997415lbj.42.1344277242194; Mon, 06 Aug 2012 11:20:42 -0700 (PDT) Sender: jamebus@gmail.com Received: by 10.112.78.9 with HTTP; Mon, 6 Aug 2012 11:20:42 -0700 (PDT) In-Reply-To: References: <4FFF4B95.9080105@delphij.net> Date: Mon, 6 Aug 2012 13:20:42 -0500 X-Google-Sender-Auth: kSovltaA6LyvyF7tCwo702LkzVE Message-ID: From: James To: Bill Crisp Content-Type: text/plain; charset=ISO-8859-1 Cc: freebsd-hackers@freebsd.org, Xin Li Subject: Re: CVE-2012-0217 Intel's sysret Kernel Privilege Escalation and FreeBSD 6.2/6.3 X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Aug 2012 18:20:44 -0000 On Mon, Aug 6, 2012 at 8:08 AM, Bill Crisp wrote: > I gave it a try on a few servers, and saw a big increase in load on > the servers, most of the load comes from apache under normal > circumstances and it that load did go up a lot. I had to roll back > the patched kernel and the load went back to what it normally is. > Did you experience anything similar on any servers? On a server > where the load was ~1 it went up with what seemed to be the same > number of requests to something like ~6 or so on a single core > servers. Ones that had higher load already also went up > considerably. Any ideas on what I might be able to do? Hi Bill. I'm sorry you're having trouble. That's a pretty annoying problem. But no, I haven't noticed any increase in load averages. I'll keep an eye out, though. Wish I had a better answer for you now. -- James.