diff options
| author | Jan H. Schönherr <jschoenh@amazon.de> | 2017-09-07 19:02:30 +0100 |
|---|---|---|
| committer | Paolo Bonzini <pbonzini@redhat.com> | 2017-09-15 16:56:43 +0200 |
| commit | 3a8b0677fc6180a467e26cc32ce6b0c09a32f9bb (patch) | |
| tree | 9b852407d70fb9b566c6cc1e99f2f635633c0321 /include | |
| parent | 36ae3c0a36b7456432fedce38ae2f7bd3e01a563 (diff) | |
KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
The value of the guest_irq argument to vmx_update_pi_irte() is
ultimately coming from a KVM_IRQFD API call. Do not BUG() in
vmx_update_pi_irte() if the value is out-of bounds. (Especially,
since KVM as a whole seems to hang after that.)
Instead, print a message only once if we find that we don't have a
route for a certain IRQ (which can be out-of-bounds or within the
array).
This fixes CVE-2017-1000252.
Fixes: efc644048ecde54 ("KVM: x86: Update IRTE for posted-interrupts")
Signed-off-by: Jan H. Schönherr <jschoenh@amazon.de>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions