projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ae60882) | patch
x86/kvm: Be careful not to clear KVM_VCPU_FLUSH_TLB bit
authorBoris Ostrovsky <boris.ostrovsky@oracle.com>
Wed, 30 Oct 2019 19:01:31 +0000 (19:01 +0000)
committerPaolo Bonzini <pbonzini@redhat.com>
Thu, 30 Jan 2020 17:45:54 +0000 (18:45 +0100)
commit8c6de56a42e0c657955e12b882a81ef07d1d073e
tree46a20e7ac5a0365ffa0d5bf414955ebf3f36db46tree | snapshot
parentae6088216ce4b99b3a4aaaccd2eb2dd40d473d42commit | diff
x86/kvm: Be careful not to clear KVM_VCPU_FLUSH_TLB bit

kvm_steal_time_set_preempted() may accidentally clear KVM_VCPU_FLUSH_TLB
bit if it is called more than once while VCPU is preempted.

This is part of CVE-2019-3016.

(This bug was also independently discovered by Jim Mattson
<jmattson@google.com>)

Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com>
Reviewed-by: Joao Martins <joao.m.martins@oracle.com>
Cc: stable@vger.kernel.org
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
arch/x86/kvm/x86.c diff | blob | history
ep93xx device tree rework repo: git://git.maquefel.me/linux.git