Messages in this thread | | | From | Serhii Popovych <> | Subject | [PATCH v2 0/2] Fix use after free in HPT resizing code and related minor improvements | Date | Mon, 4 Dec 2017 09:36:40 -0500 |
| |
It is possible to trigger use after free during HPT resize causing host kernel to crash. More details and analysis of the problem can be found in change with corresponding subject (KVM: PPC: Book3S HV: Fix use after free in case of multiple resize requests).
We need some changes to prepare for the fix, especially make ->error in HPT resize instance single point for tracking allocation state.
See individual commit description message to get more information on changes presented.
v2: Serhii Popovych: Tested with current 4.15-rc2 as host kernel on P8 with same testcase as for v1: no problems so far.
Serhii Popovych (2): KVM: PPC: Book3S HV: Drop prepare_done from struct kvm_resize_hpt and cleanups KVM: PPC: Book3S HV: Fix use after free in case of multiple resize requests
arch/powerpc/kvm/book3s_64_mmu_hv.c | 84 +++++++++++++++++++++++++------------ 1 file changed, 57 insertions(+), 27 deletions(-)
-- 1.8.3.1
| |