]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
kvm: vmx: handle invvpid vm exit gracefully
authorPetr Matousek <pmatouse@redhat.com>
Tue, 23 Sep 2014 18:22:30 +0000 (20:22 +0200)
committerJiri Slaby <jslaby@suse.cz>
Thu, 13 Nov 2014 18:02:29 +0000 (19:02 +0100)
commit5838e85ea0a3c77a83465dfd87257f96d0ceb6ae
tree08da4b040dcfe4e050963319bf6f672cc0db891b
parenta20e81cb2b2b8aebdca9d11b6fa2133f1b97251d
kvm: vmx: handle invvpid vm exit gracefully

commit a642fc305053cc1c6e47e4f4df327895747ab485 upstream.

On systems with invvpid instruction support (corresponding bit in
IA32_VMX_EPT_VPID_CAP MSR is set) guest invocation of invvpid
causes vm exit, which is currently not handled and results in
propagation of unknown exit to userspace.

Fix this by installing an invvpid vm exit handler.

This is CVE-2014-3646.

Signed-off-by: Petr Matousek <pmatouse@redhat.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Jiri Slaby <jslaby@suse.cz>
arch/x86/include/uapi/asm/vmx.h
arch/x86/kvm/vmx.c