]> git.proxmox.com Git - mirror_ubuntu-eoan-kernel.git/commit
x86/kvm: Be careful not to clear KVM_VCPU_FLUSH_TLB bit
authorBoris Ostrovsky <boris.ostrovsky@oracle.com>
Wed, 30 Oct 2019 19:01:31 +0000 (19:01 +0000)
committerKleber Sacilotto de Souza <kleber.souza@canonical.com>
Fri, 14 Feb 2020 14:41:56 +0000 (15:41 +0100)
commit518534f7c29be5e1715050f610b56cfb46ef62e0
tree8372a46618c56a17c055890bd445460b0a82c464
parent57adc534f78e86fb66417a9d73d65d1ea40f6b61
x86/kvm: Be careful not to clear KVM_VCPU_FLUSH_TLB bit

CVE-2019-3016

kvm_steal_time_set_preempted() may accidentally clear KVM_VCPU_FLUSH_TLB
bit if it is called more than once while VCPU is preempted.

This is part of CVE-2019-3016.

(This bug was also independently discovered by Jim Mattson
<jmattson@google.com>)

Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com>
Reviewed-by: Joao Martins <joao.m.martins@oracle.com>
Cc: stable@vger.kernel.org
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
(cherry picked from commit 8c6de56a42e0c657955e12b882a81ef07d1d073e)
Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>
Acked-by: Sultan Alsawaf <sultan.alsawaf@canonical.com>
Acked-by: Stefan Bader <stefan.bader@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>
arch/x86/kvm/x86.c