Paolo Bonzini 5119ffd480 KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332) ...

commit 433f4ba190 upstream.

The bounds check was present in KVM_GET_SUPPORTED_CPUID but not
KVM_GET_EMULATED_CPUID.

Reported-by: syzbot+e3f4897236c4eeb8af4f@syzkaller.appspotmail.com
Fixes: 84cffe499b ("kvm: Emulate MOVBE", 2013-10-29)
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Cc: Ben Hutchings <ben@decadent.org.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2019-12-13 08:52:58 +01:00

..

alpha

alpha: Fix Eiger NR_IRQS to 128

2019-02-20 10:25:47 +01:00

arc

ARC: IOC: panic if kernel was started with previously enabled IOC

2019-12-13 08:51:12 +01:00

arm

ARM: dts: am335x-pdu001: Fix polarity of card detection input

2019-12-13 08:52:33 +01:00

arm64

arm64: dts: exynos: Revert "Remove unneeded address space mapping for soc node"

2019-12-13 08:52:44 +01:00

c6x

kbuild: rename LDFLAGS to KBUILD_LDFLAGS

2018-08-24 08:22:08 +09:00

h8300

h8300: use cc-cross-prefix instead of hardcoding h8300-unknown-linux-

2019-04-05 22:32:55 +02:00

hexagon

hexagon: modify ffs() and fls() to return int

2018-09-10 19:42:15 -05:00

ia64

ia64:unwind: fix double free for mod->arch.init_unw_table

2019-10-05 13:09:38 +02:00

m68k

m68k: fix command-line parsing when passed from u-boot

2019-12-01 09:16:22 +01:00

microblaze

microblaze: fix multiple bugs in arch/microblaze/boot/Makefile

2019-12-05 09:20:13 +01:00

mips

MIPS: OCTEON: cvmx_pko_mem_debug8: use oldest forward compatible definition

2019-12-13 08:52:26 +01:00

nds32

nds32: Fix the items of hwcap_str ordering issue.

2019-12-13 08:51:35 +01:00

nios2

nios2: kconfig: remove duplicate DEBUG_STACK_USAGE symbol defintions

2018-08-27 09:47:20 +08:00

openrisc

openrisc: Fix broken paths to arch/or32

2019-12-05 09:20:40 +01:00

parisc

parisc: Fix vmap memory leak in ioremap()/iounmap()

2019-10-29 09:20:00 +01:00

powerpc

powerpc/math-emu: Update macros from GCC

2019-12-13 08:52:25 +01:00

riscv

RISC-V: Avoid corrupting the upper 32-bit of phys_addr_t in ioremap

2019-12-01 09:16:53 +01:00

s390

mm, gup: add missing refcount overflow checks on s390

2019-12-05 09:21:25 +01:00

sh

sh: kernel: hw_breakpoint: Fix missing break in switch statement

2019-08-25 10:47:42 +02:00

sparc

sparc: Correct ctx->saw_frame_pointer logic.

2019-12-13 08:51:52 +01:00

um

um: Make GCOV depend on !KCOV

2019-12-05 09:20:52 +01:00

unicore32

mm: convert return type of handle_mm_fault() caller to vm_fault_t

2018-08-17 16:20:28 -07:00

x86

KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332)

2019-12-13 08:52:58 +01:00

xtensa

xtensa: drop EXPORT_SYMBOL for outs*/ins*

2019-10-29 09:20:00 +01:00

.gitignore

…

Kconfig

jump_label: move 'asm goto' support test to Kconfig

2019-06-04 08:02:34 +02:00