Steve Rutherford 129a72a0d3 KVM: x86: Introduce segmented_write_std ...

Introduces segemented_write_std.

Switches from emulated reads/writes to standard read/writes in fxsave,
fxrstor, sgdt, and sidt.  This fixes CVE-2017-2584, a longstanding
kernel memory leak.

Since commit 283c95d0e389 ("KVM: x86: emulate FXSAVE and FXRSTOR",
2016-11-09), which is luckily not yet in any final release, this would
also be an exploitable kernel memory *write*!

Reported-by: Dmitry Vyukov <dvyukov@google.com>
Cc: stable@vger.kernel.org
Fixes: 96051572c819194c37a8367624b285be10297eca
Fixes: 283c95d0e3891b64087706b344a4b545d04a6e62
Suggested-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Steve Rutherford <srutherford@google.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>

2017-01-12 14:34:58 +01:00

..

assigned-dev.c

KVM: x86: use list_for_each_entry*

2016-02-23 15:40:54 +01:00

assigned-dev.h

KVM: x86: move device assignment out of kvm_host.h

2014-11-24 16:53:50 +01:00

cpuid.c

KVM: x86: Expose Intel AVX512IFMA/AVX512VBMI/SHA features to guest.

2016-12-15 15:02:44 +01:00

cpuid.h

Revert "KVM: x86: add pcommit support"

2016-07-23 11:04:23 -07:00

debugfs.c

kvm: x86: export TSC information to user-space

2016-09-16 16:57:48 +02:00

emulate.c

KVM: x86: Introduce segmented_write_std

2017-01-12 14:34:58 +01:00

hyperv.c

KVM: hyperv: fix locking of struct kvm_hv fields

2016-12-16 17:53:38 +01:00

hyperv.h

KVM: x86: Hyper-V tsc page setup

2016-09-20 09:26:20 +02:00

i8254.c

KVM: x86: Handle the kthread worker using the new API

2016-12-08 15:31:11 +01:00

i8254.h

KVM: x86: Handle the kthread worker using the new API

2016-12-08 15:31:11 +01:00

i8259.c

KVM: x86: clean/fix memory barriers in irqchip_in_kernel

2015-07-30 16:02:56 +02:00

ioapic.c

KVM: x86: fix out-of-bounds accesses of rtc_eoi map

2016-11-24 18:37:19 +01:00

ioapic.h

KVM: x86: fix out-of-bounds accesses of rtc_eoi map

2016-11-24 18:37:19 +01:00

iommu.c

- ARM: GICv3 ITS emulation and various fixes. Removal of the old

2016-08-02 16:11:27 -04:00

irq_comm.c

KVM: x86: check for pic and ioapic presence before use

2016-11-24 18:39:28 +01:00

irq.c

x86/kvm: Audit and remove any unnecessary uses of module.h

2016-07-14 15:07:00 +02:00

irq.h

KVM: Move kvm_setup_default/empty_irq_routing declaration in arch specific header

2016-07-22 18:52:00 +01:00

Kconfig

KVM: remove kvm_vcpu_compatible

2016-06-16 00:05:00 +02:00

kvm_cache_regs.h

KVM, pkeys: add pkeys support for permission_fault

2016-03-22 16:23:37 +01:00

lapic.c

KVM: x86: flush pending lapic jump label updates on module unload

2017-01-12 14:33:17 +01:00

lapic.h

KVM: x86: flush pending lapic jump label updates on module unload

2017-01-12 14:33:17 +01:00

Makefile

kvm: add stubs for arch specific debugfs support

2016-09-16 16:57:47 +02:00

mmu_audit.c

kvm: rename pfn_t to kvm_pfn_t

2016-01-15 17:56:32 -08:00

mmu.c

kvm: svm: Add support for additional SVM NPF error codes

2016-11-24 18:32:26 +01:00

mmu.h

kvm: mmu: remove is_present_gpte()

2016-07-14 09:02:47 +02:00

mmutrace.h

tracing: Rename ftrace_event.h to trace_events.h

2015-05-13 14:05:12 -04:00

mtrr.c

KVM: MTRR: fix kvm_mtrr_check_gfn_range_consistency page fault

2016-07-05 16:14:43 +02:00

page_track.c

kvm/page_track: export symbols for external usage

2016-11-04 12:13:20 +01:00

paging_tmpl.h

kvm: mmu: track read permission explicitly for shadow EPT page tables

2016-07-14 09:03:50 +02:00

pmu_amd.c

perf/x86/amd: Make HW_CACHE_REFERENCES and HW_CACHE_MISSES measure L2

2016-09-16 16:19:49 +02:00

pmu_intel.c

KVM: x86: Fix typos

2016-06-14 11:16:28 +02:00

pmu.c

KVM: x86: consolidate different ways to test for in-kernel LAPIC

2016-02-09 16:57:45 +01:00

pmu.h

KVM: x86/vPMU: Define kvm_pmu_ops to support vPMU function dispatch

2015-06-23 14:12:14 +02:00

svm.c

KVM: x86: Add kvm_skip_emulated_instruction and use it.

2016-12-08 15:31:05 +01:00

trace.h

KVM: x86: support using the vmx preemption timer for tsc deadline timer

2016-06-16 10:07:48 +02:00

tss.h

…

vmx.c

KVM: VMX: remove duplicated declaration

2017-01-05 15:08:48 +01:00

x86.c

KVM: x86: flush pending lapic jump label updates on module unload

2017-01-12 14:33:17 +01:00

x86.h

KVM: x86: introduce get_kvmclock_ns

2016-09-20 09:26:15 +02:00