Ladi Prosek 28955b03fa KVM: nVMX: update last_nonleaf_level when initializing nested EPT ...

commit fd19d3b45164466a4adce7cbff448ba9189e1427 upstream.

The function updates context->root_level but didn't call
update_last_nonleaf_level so the previous and potentially wrong value
was used for page walks.  For example, a zero value of last_nonleaf_level
would allow a potential out-of-bounds access in arch/x86/mmu/paging_tmpl.h's
walk_addr_generic function (CVE-2017-12188).

Fixes: 155a97a3d7c78b46cef6f1a973c831bc5a4f82bb
Signed-off-by: Ladi Prosek <lprosek@redhat.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2017-10-18 09:35:42 +02:00

..

alpha

alpha: uapi: Add support for __SANE_USERSPACE_TYPES__

2017-09-07 08:35:40 +02:00

arc

ARC: Re-enable MMU upon Machine Check exception

2017-09-27 14:39:23 +02:00

arm

ARM: remove duplicate 'const' annotations'

2017-10-08 10:26:11 +02:00

arm64

arm64: fault: Route pte translation faults via do_translation_fault

2017-10-05 09:44:02 +02:00

avr32

Merge branch 'akpm' (patches from Andrew)

2016-10-07 21:38:00 -07:00

blackfin

ptrace: Don't allow accessing an undumpable mm

2017-01-06 10:40:13 +01:00

c6x

c6x/ptrace: Remove useless PTRACE_SETREGSET implementation

2017-03-31 10:31:46 +02:00

cris

cris: Only build flash rescue image if CONFIG_ETRAX_AXISFLASHMAP is selected

2017-01-12 11:39:24 +01:00

frv

mm: larger stack guard gap, between vmas

2017-06-24 07:11:18 +02:00

h8300

h8300/ptrace: Fix incorrect register transfer count

2017-03-31 10:31:46 +02:00

hexagon

nmi_backtrace: generate one-line reports for idle cpus

2016-10-07 18:46:30 -07:00

ia64

ptrace: Don't allow accessing an undumpable mm

2017-01-06 10:40:13 +01:00

m32r

mm: replace access_process_vm() write parameter with gup_flags

2016-10-19 08:31:25 -07:00

m68k

m68k: Fix ndelay() macro

2016-10-30 10:13:55 +01:00

metag

metag/uaccess: Check access_ok in strncpy_from_user

2017-05-25 15:44:46 +02:00

microblaze

Merge branch 'work.uaccess2' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2016-10-11 23:38:39 -07:00

mips

MIPS: math-emu: Remove pr_err() calls from fpu_emu()

2017-10-18 09:35:38 +02:00

mn10300

mn10300: fix build error of missing fpu_save()

2017-06-17 06:41:56 +02:00

nios2

nios2: reserve boot memory for device tree

2017-04-12 12:41:14 +02:00

openrisc

openrisc: Add _text symbol to fix ksym build error

2017-08-06 18:59:46 -07:00

parisc

parisc: perf: Fix potential NULL pointer dereference

2017-10-08 10:26:10 +02:00

powerpc

powerpc/tm: Fix illegal TM state in signal handler

2017-10-12 11:51:23 +02:00

s390

s390/mm: make pmdp_invalidate() do invalidation only

2017-10-08 10:26:12 +02:00

score

Merge branch 'gup_flag-cleanups'

2016-10-19 08:39:47 -07:00

sh

mm: larger stack guard gap, between vmas

2017-06-24 07:11:18 +02:00

sparc

sparc64: remove unnecessary log message

2017-08-30 10:21:38 +02:00

tile

mm: larger stack guard gap, between vmas

2017-06-24 07:11:18 +02:00

um

um: Fix to call read_initrd after init_bootmem

2017-05-25 15:44:47 +02:00

unicore32

unicore32: use simpler API for random address requests

2016-10-11 15:06:32 -07:00

x86

KVM: nVMX: update last_nonleaf_level when initializing nested EPT

2017-10-18 09:35:42 +02:00

xtensa

xtensa: don't limit csum_partial export by CONFIG_NET

2017-08-16 13:43:16 -07:00

.gitignore

…

Kconfig

This adds a new gcc plugin named "latent_entropy". It is designed to

2016-10-15 10:03:15 -07:00