]> www.infradead.org Git - users/jedix/linux-maple.git/commit
KVM: coalesced_mmio: add bounds checking v4.1.12-124.31.3
authorMatt Delco <delco@chromium.org>
Thu, 12 Sep 2019 23:07:58 +0000 (16:07 -0700)
committerBrian Maly <brian.maly@oracle.com>
Thu, 19 Sep 2019 20:00:04 +0000 (16:00 -0400)
commitbc9400c9b2d126277208fec95743a78c077be5ff
tree5da60b19abad754254d9b1b98a715c938c9062cf
parentff578f454e64beee69563b223567ccba226486a3
KVM: coalesced_mmio: add bounds checking

The first/last indexes are typically shared with a user app.
The app can change the 'last' index that the kernel uses
to store the next result.  This change sanity checks the index
before using it for writing to a potentially arbitrary address.

Signed-off-by: Matt Delco <delco@chromium.org>
Orabug: 30318042
CVE: CVE-2019-14821
[setje: This patch came to UEK while still under embargo.]
Signed-off-by: Jan Setje-Eilers <jan.setjeeilers@oracle.com>
Reviewed-by: Dhaval Giani <dhaval.giani@oracle.com>
Signed-off-by: Brian Maly <brian.maly@oracle.com>
virt/kvm/coalesced_mmio.c