Searched hist:b60fe990c6b07ef6d4df67bc0530c7c90a62623a (Results 1 – 1 of 1) sorted by relevance
| /linux/virt/kvm/ |
| H A D | coalesced_mmio.c | b60fe990c6b07ef6d4df67bc0530c7c90a62623a Mon Sep 16 21:16:54 UTC 2019 Matt Delco <delco@chromium.org> KVM: coalesced_mmio: add bounds checking
The first/last indexes are typically shared with a user app.
The app can change the 'last' index that the kernel uses
to store the next result. This change sanity checks the index
before using it for writing to a potentially arbitrary address.
This fixes CVE-2019-14821.
Cc: stable@vger.kernel.org
Fixes: 5f94c1741bdc ("KVM: Add coalesced MMIO support (common part)")
Signed-off-by: Matt Delco <delco@chromium.org>
Signed-off-by: Jim Mattson <jmattson@google.com>
Reported-by: syzbot+983c866c3dd6efa3662a@syzkaller.appspotmail.com
[Use READ_ONCE. - Paolo]
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
|