]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
KVM: x86: Reload pit counters for all channels when restoring state
authorAndrew Honig <ahonig@google.com>
Wed, 18 Nov 2015 22:50:23 +0000 (14:50 -0800)
committerSasha Levin <sasha.levin@oracle.com>
Wed, 13 Apr 2016 21:14:29 +0000 (17:14 -0400)
commit90352f3f473a29db1289ec31facc1ac18cc66e9e
tree4a129ca37fc539b77d23af5e777b69da6222ea11
parentea44bf73d956729f3122bbed0661db7b18864277
KVM: x86: Reload pit counters for all channels when restoring state

[ Upstream commit 0185604c2d82c560dab2f2933a18f797e74ab5a8 ]

Currently if userspace restores the pit counters with a count of 0
on channels 1 or 2 and the guest attempts to read the count on those
channels, then KVM will perform a mod of 0 and crash.  This will ensure
that 0 values are converted to 65536 as per the spec.

This is CVE-2015-7513.

Signed-off-by: Andy Honig <ahonig@google.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
arch/x86/kvm/x86.c