]> git.baikalelectronics.ru Git - kernel.git/commit
KVM: x86: Introduce segmented_write_std
authorSteve Rutherford <srutherford@google.com>
Thu, 12 Jan 2017 02:28:29 +0000 (18:28 -0800)
committerPaolo Bonzini <pbonzini@redhat.com>
Thu, 12 Jan 2017 13:34:58 +0000 (14:34 +0100)
commite82eb6ea59d34050dc36c639932d8d39bee2d0f9
tree56a0adfdeff6c007ba3a5f36577036f20e7d5150
parent5494125aa5a4843fa496f0553911d29782b30f95
KVM: x86: Introduce segmented_write_std

Introduces segemented_write_std.

Switches from emulated reads/writes to standard read/writes in fxsave,
fxrstor, sgdt, and sidt.  This fixes CVE-2017-2584, a longstanding
kernel memory leak.

Since commit 7a005ea576af ("KVM: x86: emulate FXSAVE and FXRSTOR",
2016-11-09), which is luckily not yet in any final release, this would
also be an exploitable kernel memory *write*!

Reported-by: Dmitry Vyukov <dvyukov@google.com>
Cc: stable@vger.kernel.org
Fixes: 396791412794c1c34676407ff06fda7b252e1ad9
Fixes: 7a005ea576af83f43a577c6f43e4a664b760d02a
Suggested-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Steve Rutherford <srutherford@google.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
arch/x86/kvm/emulate.c