2

This is from /var/log/dmesg

Your BIOS has requested that x2apic be disabled.
This will leave your machine vulnerable to irq-injection attacks.
                                           ^^^^^^^^^^^^^^^^^^^^^
Use 'intremap=no_x2apic_optout' to override BIOS request.
Enabled IRQ remapping in xapic mode
4

There's some interesting discussion of it on the linux kernel list, referring to this paper. In short, a guest OS which has access to some hardware could raise interrupts on the host OS and cause the code that handles those interrupts to run. At best (from the defense's standpoint) this could cause strange behavior or crashes as the software tries to handle hardware events that aren't happening. At worst it might exercise a vulnerability and lead to a host compromise (people don't tend to write drivers assuming that the hardware lies to them). It's somewhat of a corner case and lots of things need to go wrong to make it a problem, but there's a warning for it anyway.

If you're not running VMs on the server, don't worry about it. If you are, well, you may want to look into hardware with a newer (smarter) BIOS :)

0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.