]> git.baikalelectronics.ru Git - kernel.git/commit
KVM: x86: Introduce segmented_write_std
authorSteve Rutherford <srutherford@google.com>
Thu, 12 Jan 2017 02:28:29 +0000 (18:28 -0800)
committerPaolo Bonzini <pbonzini@redhat.com>
Thu, 12 Jan 2017 13:34:58 +0000 (14:34 +0100)
commit49a3070254e62ca9849eab7f8e0ba4468898f5d7
tree56a0adfdeff6c007ba3a5f36577036f20e7d5150
parent9ee2c198308fb6b10540bd106e472bc2b25e3266
KVM: x86: Introduce segmented_write_std

Introduces segemented_write_std.

Switches from emulated reads/writes to standard read/writes in fxsave,
fxrstor, sgdt, and sidt.  This fixes CVE-2017-2584, a longstanding
kernel memory leak.

Since commit 7d7602b4ef1f ("KVM: x86: emulate FXSAVE and FXRSTOR",
2016-11-09), which is luckily not yet in any final release, this would
also be an exploitable kernel memory *write*!

Reported-by: Dmitry Vyukov <dvyukov@google.com>
Cc: stable@vger.kernel.org
Fixes: 0eb535e3ecceca613e2a5ef9670373bfc16132c9
Fixes: 7d7602b4ef1f537698bd8e4d64ef16a89641976d
Suggested-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Steve Rutherford <srutherford@google.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
arch/x86/kvm/emulate.c