iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/arch
History
Paolo Bonzini 385bddaf5e KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332) 
commit 433f4ba1904100da65a311033f17a9bf586b287e upstream.

The bounds check was present in KVM_GET_SUPPORTED_CPUID but not
KVM_GET_EMULATED_CPUID.

Reported-by: syzbot+e3f4897236c4eeb8af4f@syzkaller.appspotmail.com
Fixes: 84cffe499b94 ("kvm: Emulate MOVBE", 2013-10-29)
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Cc: Ben Hutchings <ben@decadent.org.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2019-12-21 10:35:01 +01:00
..
alpha
alpha: Fix Eiger NR_IRQS to 128
2019-02-20 10:13:22 +01:00
arc
ARC: perf: Accommodate big-endian CPU
2019-11-28 18:26:16 +01:00
arm
ARM: dts: sunxi: Fix PMU compatible strings
2019-12-21 10:34:47 +01:00
arm64
arm64: smp: Handle errors reported by the firmware
2019-12-05 15:26:40 +01:00
avr32
avr32: off by one in at32_init_pio()
2016-10-07 15:23:45 +02:00
blackfin
pinctrl: adi2: Fix Kconfig build problem
2017-12-20 10:05:00 +01:00
c6x
c6x/ptrace: Remove useless PTRACE_SETREGSET implementation
2017-03-31 09:49:53 +02:00
cris
mm: replace get_user_pages() write/force parameters with gup_flags
2018-12-17 21:55:16 +01:00
frv
futex: Remove duplicated code and fix undefined behaviour
2018-05-26 08:48:50 +02:00
h8300
h8300: use cc-cross-prefix instead of hardcoding h8300-unknown-linux-
2019-04-27 09:33:48 +02:00
hexagon
hexagon: modify ffs() and fls() to return int
2018-10-10 08:52:12 +02:00
ia64
ia64:unwind: fix double free for mod->arch.init_unw_table
2019-10-05 12:27:47 +02:00
m32r
m32r: fix __get_user()
2016-09-24 10:07:43 +02:00
m68k
bug.h: work around GCC PR82365 in BUG()
2019-07-10 09:56:42 +02:00
metag
metag/uaccess: Check access_ok in strncpy_from_user
2017-05-25 14:30:16 +02:00
microblaze
microblaze: move "... is ready" messages to arch/microblaze/Makefile
2019-12-05 15:26:47 +01:00
mips
MIPS: OCTEON: cvmx_pko_mem_debug8: use oldest forward compatible definition
2019-12-21 10:34:45 +01:00
mn10300
mn10300/misalignment: Use SIGSEGV SEGV_MAPERR to report a failed user copy
2018-02-16 20:09:47 +01:00
nios2
nios2: reserve boot memory for device tree
2017-04-12 12:38:34 +02:00
openrisc
openrisc: Fix broken paths to arch/or32
2019-12-05 15:26:54 +01:00
parisc
parisc: Fix vmap memory leak in ioremap()/iounmap()
2019-10-29 09:13:29 +01:00
powerpc
powerpc/math-emu: Update macros from GCC
2019-12-21 10:34:44 +01:00
s390
KVM: s390: unregister debug feature on failing arch init
2019-12-05 15:26:50 +01:00
score
score: fix copy_from_user() and friends
2016-09-24 10:07:44 +02:00
sh
sh: kernel: hw_breakpoint: Fix missing break in switch statement
2019-08-25 10:52:55 +02:00
sparc
sparc64: Rework xchg() definition to avoid warnings.
2019-11-28 18:25:52 +01:00
tile
futex: Remove duplicated code and fix undefined behaviour
2018-05-26 08:48:50 +02:00
um
um: Make GCOV depend on !KCOV
2019-12-05 15:27:01 +01:00
unicore32
…
x86
KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332)
2019-12-21 10:35:01 +01:00
xtensa
xtensa: drop EXPORT_SYMBOL for outs*/ins*
2019-10-29 09:13:29 +01:00
.gitignore
…
Kconfig
…