]> www.infradead.org Git - users/jedix/linux-maple.git/commit
kvm: x86: Check memopp before dereference (CVE-2016-8630)
authorOwen Hofmann <osh@google.com>
Thu, 27 Oct 2016 18:25:52 +0000 (11:25 -0700)
committerChuck Anderson <chuck.anderson@oracle.com>
Tue, 7 Feb 2017 05:04:07 +0000 (21:04 -0800)
commit704f15984cd19c8b58ca9d74a5d6b6c0b8cb38d5
tree53578a873cf6585b022ae9d1f3b2d4db84e1eb46
parent3698e7c1b1a7e0fb57274911a15fa014bc735194
kvm: x86: Check memopp before dereference (CVE-2016-8630)

Orabug: 25133227
CVE: CVE-2016-8630

Commit 41061cdb98 ("KVM: emulate: do not initialize memopp") removes a
check for non-NULL under incorrect assumptions. An undefined instruction
with a ModR/M byte with Mod=0 and R/M-5 (e.g. 0xc7 0x15) will attempt
to dereference a null pointer here.

Fixes: 41061cdb98a0bec464278b4db8e894a3121671f5
Message-Id: <1477592752-126650-2-git-send-email-osh@google.com>
Signed-off-by: Owen Hofmann <osh@google.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
(cherry picked from commit d9092f52d7e61dd1557f2db2400ddb430e85937e)
Signed-off-by: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com>
Reviewed-by: Jack Vogel <jack.vogel@oracle.com>
arch/x86/kvm/emulate.c