]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/commit - arch/x86/kvm/vmx.c
KVM: nVMX: Check IO instruction VM-exit conditions
authorOliver Upton <oupton@google.com>
Thu, 27 Feb 2020 18:51:00 +0000 (19:51 +0100)
committerKleber Sacilotto de Souza <kleber.souza@canonical.com>
Fri, 28 Feb 2020 10:42:52 +0000 (11:42 +0100)
commit6335e0e8156182cfa42f8ebabe845ae5aee11a95
treead851eeeabdcd41d3606e255a4b49237949d3f58
parente8c9d7108420f7f5b45f5ec37d3b78783d0a6591
KVM: nVMX: Check IO instruction VM-exit conditions

CVE-2020-2732

commit 35a571346a94fb93b5b3b6a599675ef3384bc75c upstream.

Consult the 'unconditional IO exiting' and 'use IO bitmaps' VM-execution
controls when checking instruction interception. If the 'use IO bitmaps'
VM-execution control is 1, check the instruction access against the IO
bitmaps to determine if the instruction causes a VM-exit.

Signed-off-by: Oliver Upton <oupton@google.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>
Acked-by: Benjamin M Romer <benjamin.romer@canonical.com>
Acked-by: Khalid Elmously <khalid.elmously@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>
arch/x86/kvm/vmx.c