Ack :Re: [RESEND] [PATCH 0/2] [CVE-2012-1601] KVM: Ensure all vcpus are consistent with in-kernel irqchip
Herton Ronaldo Krzesinski
herton.krzesinski at canonical.com
Thu Apr 26 18:13:26 UTC 2012
On Thu, Apr 26, 2012 at 09:37:37AM -0700, Brad Figg wrote:
> CVE-2012-1601
>
> BugLink: http://bugs.launchpad.net/bugs/971685
>
> If some vcpus are created before KVM_CREATE_IRQCHIP, then
> irqchip_in_kernel() and vcpu->arch.apic will be inconsistent, leading
> to potential NULL pointer dereferences.
>
> Fix by:
> - ensuring that no vcpus are installed when KVM_CREATE_IRQCHIP is called
> - ensuring that a vcpu has an apic if it is installed after KVM_CREATE_IRQCHIP
>
> This is somewhat long winded because vcpu->arch.apic is created without
> kvm->lock held.
>
> Signed-off-by: Brad Figg <brad.figg at canonical.com>
> --
> 1.7.9.5
>
>
> --
> kernel-team mailing list
> kernel-team at lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/kernel-team
>
--
[]'s
Herton
More information about the kernel-team
mailing list