KVM: VMX: fix vmx null pointer dereference on debug register access
authorGleb Natapov <gleb@redhat.com>
Wed, 10 Nov 2010 10:08:12 +0000 (12:08 +0200)
committerGreg Kroah-Hartman <gregkh@suse.de>
Thu, 9 Dec 2010 21:26:47 +0000 (13:26 -0800)
commit370c6b5200b04645ab1b00bad931ae899cd55471
treedcadfd9c4e6526cb776f8b68bfeb01503b591d84
parent004e147bd32cda45140354ace87f55abed3b82cb
KVM: VMX: fix vmx null pointer dereference on debug register access

There is a bug in KVM that can be used to crash a host on Intel
machines. If emulator is tricked into emulating mov to/from DR instruction
it causes NULL pointer dereference on VMX since kvm_x86_ops->(set|get)_dr
are not initialized. Recently this is not exploitable from guest
userspace, but malicious guest kernel can trigger it easily.

CVE-2010-0435

On upstream bug was fixed differently around 2.6.34.

Signed-off-by: Gleb Natapov <gleb@redhat.com>
Signed-off-by: Avi Kivity <avi@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
arch/x86/kvm/x86.c