]> git.baikalelectronics.ru Git - kernel.git/commit
KVM: x86: work around infinite loop in microcode when #AC is delivered
authorEric Northup <digitaleric@google.com>
Tue, 3 Nov 2015 17:03:53 +0000 (18:03 +0100)
committerPaolo Bonzini <pbonzini@redhat.com>
Tue, 10 Nov 2015 11:06:24 +0000 (12:06 +0100)
commit16a895301806ef01ba8116fb459fb84075e5e1b5
tree68f23011f566132ae1dc3351c30227d1f1b85dc0
parent65214b49a1b361cca741dded0f3801db854cb1da
KVM: x86: work around infinite loop in microcode when #AC is delivered

It was found that a guest can DoS a host by triggering an infinite
stream of "alignment check" (#AC) exceptions.  This causes the
microcode to enter an infinite loop where the core never receives
another interrupt.  The host kernel panics pretty quickly due to the
effects (CVE-2015-5307).

Signed-off-by: Eric Northup <digitaleric@google.com>
Cc: stable@vger.kernel.org
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
arch/x86/include/uapi/asm/svm.h
arch/x86/kvm/svm.c
arch/x86/kvm/vmx.c