projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8ef863e) | patch
KVM: nVMX: Don't dump VMCS if virtual APIC page can't be mapped
authorSean Christopherson <sean.j.christopherson@intel.com>
Tue, 7 May 2019 16:06:26 +0000 (09:06 -0700)
committerPaolo Bonzini <pbonzini@redhat.com>
Tue, 18 Jun 2019 09:47:21 +0000 (11:47 +0200)
commit73cb85568433feadb79e963bf2efba9b3e9ae3df
tree183b4dc9aca07b0b477bc1a8aed3bc55504fa0a0tree | snapshot
parent8ef863e67a89c72b5af893a1214f6c35a5f456f8commit | diff
KVM: nVMX: Don't dump VMCS if virtual APIC page can't be mapped

... as a malicious userspace can run a toy guest to generate invalid
virtual-APIC page addresses in L1, i.e. flood the kernel log with error
messages.

Fixes: 690908104e39d ("KVM: nVMX: allow tests to use bad virtual-APIC page address")
Cc: stable@vger.kernel.org
Cc: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Sean Christopherson <sean.j.christopherson@intel.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
arch/x86/kvm/vmx/nested.c diff | blob | history
ep93xx device tree rework repo: git://git.maquefel.me/linux.git