Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

This is from /var/log/dmesg

Your BIOS has requested that x2apic be disabled.
This will leave your machine vulnerable to irq-injection attacks.
                                           ^^^^^^^^^^^^^^^^^^^^^
Use 'intremap=no_x2apic_optout' to override BIOS request.
Enabled IRQ remapping in xapic mode
share|improve this question

1 Answer 1

up vote 4 down vote accepted

There's some interesting discussion of it on the linux kernel list, referring to this paper. In short, a guest OS which has access to some hardware could raise interrupts on the host OS and cause the code that handles those interrupts to run. At best (from the defense's standpoint) this could cause strange behavior or crashes as the software tries to handle hardware events that aren't happening. At worst it might exercise a vulnerability and lead to a host compromise (people don't tend to write drivers assuming that the hardware lies to them). It's somewhat of a corner case and lots of things need to go wrong to make it a problem, but there's a warning for it anyway.

If you're not running VMs on the server, don't worry about it. If you are, well, you may want to look into hardware with a newer (smarter) BIOS :)

share|improve this answer
    
Thanks for the info! –  mpapec Feb 10 at 15:28

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.