]> git.ipfire.org Git - thirdparty/linux.git/commit
KVM: TDX: Check size of user's kvm_tdx_capabilities array before allocating
authorThorsten Blum <thorsten.blum@linux.dev>
Fri, 17 Oct 2025 21:39:14 +0000 (23:39 +0200)
committerSean Christopherson <seanjc@google.com>
Thu, 13 Nov 2025 16:29:59 +0000 (08:29 -0800)
commit11b79f8318aefc7ddfd12668fd1d80bde1c9f7bc
treef4d625b59d372206fb30d78a2dbbdaee4867e038
parent27376465e945c11ad13c1e1d877ed318be010062
KVM: TDX: Check size of user's kvm_tdx_capabilities array before allocating

When userspace is getting TDX capabilities, retrieve and check the number
of user entries before allocating kernel scratch space to avoid having to
unwind the allocation if get_user() fails or if 'user_caps' is too small
to fit 'caps'.

Signed-off-by: Thorsten Blum <thorsten.blum@linux.dev>
Tested-by: Rick Edgecombe <rick.p.edgecombe@intel.com>
Link: https://patch.msgid.link/20251017213914.167301-1-thorsten.blum@linux.dev
[sean: split to separate patch]
Signed-off-by: Sean Christopherson <seanjc@google.com>
arch/x86/kvm/vmx/tdx.c