iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/arch/x86/kvm
History
Thomas Gleixner 187598fd82 KVM: x86: Cancel pvclock_gtod_work on module removal 
commit 594b27e677b35f9734b1969d175ebc6146741109 upstream.

Nothing prevents the following:

  pvclock_gtod_notify()
    queue_work(system_long_wq, &pvclock_gtod_work);
  ...
  remove_module(kvm);
  ...
  work_queue_run()
    pvclock_gtod_work()	<- UAF

Ditto for any other operation on that workqueue list head which touches
pvclock_gtod_work after module removal.

Cancel the work in kvm_arch_exit() to prevent that.

Fixes: 16e8d74d2da9 ("KVM: x86: notifier for clocksource changes")
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Message-Id: <87czu4onry.ffs@nanos.tec.linutronix.de>
Cc: stable@vger.kernel.org
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-05-19 10:08:31 +02:00
..
vmx
KVM: nVMX: Truncate bits 63:32 of VMCS field on nested check in !64-bit
2021-05-14 09:44:15 +02:00
cpuid.c
kvm/svm: PKU not currently supported
2020-02-11 04:35:40 -08:00
cpuid.h
KVM: x86: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits
2021-01-06 14:48:36 +01:00
debugfs.c
KVM: no need to check return value of debugfs_create functions
2019-08-05 12:55:49 +02:00
emulate.c
KVM: x86: Update emulator context mode if SYSENTER xfers to 64-bit mode
2021-02-10 09:25:31 +01:00
hyperv.c
KVM: x86: Protect kvm_hv_msr_[get|set]_crash_data() from Spectre-v1/L1TF attacks
2020-02-11 04:35:38 -08:00
hyperv.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 499
2019-06-19 17:09:53 +02:00
i8254.c
kvm: x86: Add memcg accounting to KVM allocations
2019-02-20 22:48:30 +01:00
i8254.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
i8259.c
KVM: x86: Refactor picdev_write() to prevent Spectre-v1/L1TF attacks
2020-02-11 04:35:37 -08:00
ioapic.c
KVM: x86: Protect ioapic_read_indirect() from Spectre-v1/L1TF attacks
2020-02-11 04:35:38 -08:00
ioapic.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
irq_comm.c
KVM: x86: don't notify userspace IOAPIC on edge-triggered interrupt EOI
2020-02-28 17:22:22 +01:00
irq.c
KVM: x86: Fix split-irqchip vs interrupt injection window request
2020-12-02 08:49:46 +01:00
irq.h
KVM/arm updates for 5.3
2019-07-11 15:14:16 +02:00
Kconfig
kvm: x86: add host poll control msrs
2019-06-18 11:43:46 +02:00
kvm_cache_regs.h
KVM: x86: Mark CR4.TSD as being possibly owned by the guest
2020-07-16 08:16:44 +02:00
lapic.c
KVM: x86: handle !lapic_in_kernel case in kvm_cpu_*_extint
2020-12-02 08:49:46 +01:00
lapic.h
KVM: SVM: Fix potential wrong physical id in avic_handle_ldr_update
2019-10-22 18:47:50 +02:00
Makefile
KVM: x86: fix TRACE_INCLUDE_PATH and remove -I. header search paths
2019-01-25 19:12:37 +01:00
mmu_audit.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 499
2019-06-19 17:09:53 +02:00
mmu.c
KVM: x86/mmu: Remove the defunct update_pte() paging hook
2021-05-19 10:08:20 +02:00
mmu.h
KVM: x86: fix shift out of bounds reported by UBSAN
2021-01-12 20:16:25 +01:00
mmutrace.h
KVM: x86: fix incorrect comparison in trace event
2020-10-01 13:17:35 +02:00
mtrr.c
KVM: x86: Protect MSR-based index computations in fixed_msr_to_seg_unit() from Spectre-v1/L1TF attacks
2020-02-11 04:35:39 -08:00
page_track.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 499
2019-06-19 17:09:53 +02:00
paging_tmpl.h
KVM: nVMX: Plumb L2 GPA through to PML emulation
2020-06-30 15:37:07 -04:00
pmu_amd.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 499
2019-06-19 17:09:53 +02:00
pmu.c
KVM: x86: Add fixed counters to PMU filter
2019-07-20 09:00:48 +02:00
pmu.h
KVM: x86: Protect MSR-based index computations in pmu.h from Spectre-v1/L1TF attacks
2020-02-11 04:35:38 -08:00
svm.c
kvm: x86: replace kvm_spec_ctrl_test_value with runtime test on the host
2021-03-04 10:26:09 +01:00
trace.h
KVM: nVMX: trace nested VM-Enter failures detected by H/W
2019-09-11 17:34:17 +02:00
tss.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
x86.c
KVM: x86: Cancel pvclock_gtod_work on module removal
2021-05-19 10:08:31 +02:00
x86.h
kvm: x86: replace kvm_spec_ctrl_test_value with runtime test on the host
2021-03-04 10:26:09 +01:00