git.baikalelectronics.ru Git - kernel.git/commit

]> git.baikalelectronics.ru Git - kernel.git/commit

author	Avi Kivity <avi@redhat.com>
	Tue, 19 Oct 2010 14:46:55 +0000 (16:46 +0200)
committer	Marcelo Tosatti <mtosatti@redhat.com>
	Tue, 19 Oct 2010 16:21:45 +0000 (14:21 -0200)
commit	81f8ee3e9324b1551c3917230ea2d632ab3f94fb
tree	76d1b596d873514fdb9b3bf75d6d7b3cbfada85d	tree \| snapshot
parent	fd3f3e52100082d3cbdb5bc269f9d6c68ef70849	commit \| diff

KVM: Fix fs/gs reload oops with invalid ldt

kvm reloads the host's fs and gs blindly, however the underlying segment
descriptors may be invalid due to the user modifying the ldt after loading
them.

Fix by using the safe accessors (loadsegment() and load_gs_index()) instead
of home grown unsafe versions.

This is CVE-2010-3698.

KVM-Stable-Tag.
Signed-off-by: Avi Kivity <avi@redhat.com>
Signed-off-by: Marcelo Tosatti <mtosatti@redhat.com>

arch/x86/include/asm/kvm_host.h		diff \| blob \| history
arch/x86/kvm/svm.c		diff \| blob \| history
arch/x86/kvm/vmx.c		diff \| blob \| history

Linux Kernel Source Tree.

RSS Atom