]> git.ipfire.org Git - thirdparty/qemu.git/commit
pcie_sriov: Validate NumVFs
authorAkihiko Odaki <akihiko.odaki@daynix.com>
Wed, 28 Feb 2024 11:33:13 +0000 (20:33 +0900)
committerMichael Tokarev <mjt@tls.msk.ru>
Wed, 13 Mar 2024 18:52:34 +0000 (21:52 +0300)
commit313e746958967a4b941ad4bbb80726727318edfa
tree204de92137c22e0926795c3a41611b7c68013954
parent98f3488c1b6090024299f8d6362aa6aac03fe26d
pcie_sriov: Validate NumVFs

The guest may write NumVFs greater than TotalVFs and that can lead
to buffer overflow in VF implementations.

Cc: qemu-stable@nongnu.org
Fixes: CVE-2024-26327
Fixes: 7c0fa8dff811 ("pcie: Add support for Single Root I/O Virtualization (SR/IOV)")
Signed-off-by: Akihiko Odaki <akihiko.odaki@daynix.com>
Message-Id: <20240228-reuse-v8-2-282660281e60@daynix.com>
Reviewed-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Reviewed-by: Sriram Yagnaraman <sriram.yagnaraman@ericsson.com>
(cherry picked from commit 6081b4243cd64dff1b2cf5b0c215c71e9d7e753b)
Signed-off-by: Michael Tokarev <mjt@tls.msk.ru>
hw/pci/pcie_sriov.c