[PATCH 0/1x4] [CVE-2012-1601] KVM: Ensure all vcpus are consistent with in-kernel irqchip

Brad Figg brad.figg at canonical.com
Wed Apr 25 17:53:12 UTC 2012


CVE-2012-1601

BugLink: http://bugs.launchpad.net/bugs/971685

If some vcpus are created before KVM_CREATE_IRQCHIP, then
irqchip_in_kernel() and vcpu->arch.apic will be inconsistent, leading
to potential NULL pointer dereferences.

Fix by:
- ensuring that no vcpus are installed when KVM_CREATE_IRQCHIP is called
- ensuring that a vcpu has an apic if it is installed after KVM_CREATE_IRQCHIP

This is somewhat long winded because vcpu->arch.apic is created without
kvm->lock held.

Signed-off-by: Brad Figg <brad.figg at canonical.com>
-- 
1.7.9.5





More information about the kernel-team mailing list