]> git.proxmox.com Git - pve-kernel-jessie.git/commit
projects / pve-kernel-jessie.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 7b33f3c) | patch
fix CVE-2017-2596: kvm: page reference leakage
authorFabian Grünbichler <f.gruenbichler@proxmox.com>
Wed, 8 Feb 2017 09:28:13 +0000 (10:28 +0100)
committerFabian Grünbichler <f.gruenbichler@proxmox.com>
Wed, 8 Feb 2017 09:54:15 +0000 (10:54 +0100)
commit73c23b9bb4013ab908044c7ba544f632e2935237
treecd4b1b4ae3a33ed91d848fc2029ae42a8b148af2tree
parent7b33f3ca8bfddc9f84576f73d6367980ba2f8f0dcommit | diff
fix CVE-2017-2596: kvm: page reference leakage

Linux kernel built with the KVM virtualisation
support(CONFIG_KVM), with nested virtualisation(nVMX)
feature enabled(nested=1), is vulnerable to host memory
leakage issue. It could occur while emulating VMXON
instruction in 'handle_vmon'.

A L1 guest user could use this flaw to leak host memory
potentially resulting in DoS.
CVE-2017-2596-kvm-page-reference-leakage-in-handle_vmon.patch [new file with mode: 0644] blob
Makefile diff | blob | blame | history
Linux Kernel for Jessie