| Subject | Re: [PATCH 3.14 26/77] KVM: x86: Fix of previously incomplete fix for CVE-2014-8480 | From | Nadav Amit <> | Date | Wed, 28 Jan 2015 10:51:10 +0200 |
| |
This CVE only affect 3.17 and 3.18. It shouldn’t hurt, but you can omit this patch from 3.14.
Regards, Nadav
Greg Kroah-Hartman <gregkh@linuxfoundation.org> wrote:
> 3.14-stable review patch. If anyone has any objections, please let me know. > > ------------------ > > From: Nadav Amit <nadav.amit@gmail.com> > > commit 63ea0a49ae0b145b91ff2b070c01b66fc75854b9 upstream. > > STR and SLDT with rip-relative operand can cause a host kernel oops. > Mark them as DstMem as well. > > Signed-off-by: Nadav Amit <namit@cs.technion.ac.il> > Signed-off-by: Paolo Bonzini <pbonzini@redhat.com> > Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> > > --- > arch/x86/kvm/emulate.c | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > > --- a/arch/x86/kvm/emulate.c > +++ b/arch/x86/kvm/emulate.c > @@ -3668,8 +3668,8 @@ static const struct opcode group5[] = { > }; > > static const struct opcode group6[] = { > - DI(Prot, sldt), > - DI(Prot, str), > + DI(Prot | DstMem, sldt), > + DI(Prot | DstMem, str), > II(Prot | Priv | SrcMem16, em_lldt, lldt), > II(Prot | Priv | SrcMem16, em_ltr, ltr), > N, N, N, N,
|