git.ipfire.org Git - thirdparty/kernel/stable.git/commit

author	Paolo Bonzini <pbonzini@redhat.com>
	Wed, 4 Dec 2019 09:28:54 +0000 (10:28 +0100)
committer	Greg Kroah-Hartman <gregkh@linuxfoundation.org>
	Fri, 13 Dec 2019 07:49:44 +0000 (08:49 +0100)
commit	9e4bc1ba9f02d31b5f727f7c0a49f82dca0875b7
tree	0d7b394e5d26ec8c31aeaa7d46d194ad4b093634	tree
parent	b7a1f2e831c1ea95b83474856966b1cc1cd7b8e5	commit \| diff

KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332)

commit 433f4ba1904100da65a311033f17a9bf586b287e upstream.

The bounds check was present in KVM_GET_SUPPORTED_CPUID but not
KVM_GET_EMULATED_CPUID.

Reported-by: syzbot+e3f4897236c4eeb8af4f@syzkaller.appspotmail.com
Fixes: 84cffe499b94 ("kvm: Emulate MOVBE", 2013-10-29)
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Cc: Ben Hutchings <ben@decadent.org.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>