]> git.baikalelectronics.ru Git - kernel.git/commit
kvm: x86: Check memopp before dereference (CVE-2016-8630)
authorOwen Hofmann <osh@google.com>
Thu, 27 Oct 2016 18:25:52 +0000 (11:25 -0700)
committerPaolo Bonzini <pbonzini@redhat.com>
Wed, 2 Nov 2016 20:31:53 +0000 (21:31 +0100)
commitc79deb8af304c127e4cff44c1357a2494d6eed3b
tree500459709e876c59ff397a7692b93f1e8854c162
parentc2e9f94807c94050ab2de8f3b5a851afa9b18472
kvm: x86: Check memopp before dereference (CVE-2016-8630)

Commit aaade02e9f ("KVM: emulate: do not initialize memopp") removes a
check for non-NULL under incorrect assumptions. An undefined instruction
with a ModR/M byte with Mod=0 and R/M-5 (e.g. 0xc7 0x15) will attempt
to dereference a null pointer here.

Fixes: aaade02e9f3996e965e97758ff8852b2da44a983
Message-Id: <1477592752-126650-2-git-send-email-osh@google.com>
Signed-off-by: Owen Hofmann <osh@google.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
arch/x86/kvm/emulate.c