Jim Mattson 8d383ff7de kvm: vmx: Scrub hardware GPRs at VM-exit ...

commit 0cb5b30698 upstream.

Guest GPR values are live in the hardware GPRs at VM-exit.  Do not
leave any guest values in hardware GPRs after the guest GPR values are
saved to the vcpu_vmx structure.

This is a partial mitigation for CVE 2017-5715 and CVE 2017-5753.
Specifically, it defeats the Project Zero PoC for CVE 2017-5715.

Suggested-by: Eric Northup <digitaleric@google.com>
Signed-off-by: Jim Mattson <jmattson@google.com>
Reviewed-by: Eric Northup <digitaleric@google.com>
Reviewed-by: Benjamin Serebrin <serebrin@google.com>
Reviewed-by: Andrew Honig <ahonig@google.com>
[Paolo: Add AMD bits, Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>]
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-01-17 09:35:25 +01:00

..

alpha

alpha: fix build failures

2017-12-25 14:22:16 +01:00

arc

ARC: uaccess: dont use "l" gcc inline asm constraint modifier

2018-01-10 09:27:11 +01:00

arm

KVM: Fix stack-out-of-bounds read in write_mmio

2018-01-17 09:35:24 +01:00

arm64

arm64: Initialise high_memory global variable earlier

2017-12-25 14:22:08 +01:00

avr32

avr32: off by one in at32_init_pio()

2016-10-07 15:23:45 +02:00

blackfin

pinctrl: adi2: Fix Kconfig build problem

2017-12-20 10:05:00 +01:00

c6x

c6x/ptrace: Remove useless PTRACE_SETREGSET implementation

2017-03-31 09:49:53 +02:00

cris

cris: Only build flash rescue image if CONFIG_ETRAX_AXISFLASHMAP is selected

2017-01-12 11:22:48 +01:00

frv

mm: larger stack guard gap, between vmas

2017-06-26 07:13:11 +02:00

h8300

h8300/ptrace: Fix incorrect register transfer count

2017-03-31 09:49:53 +02:00

hexagon

hexagon: fix strncpy_from_user() error return

2016-09-24 10:07:44 +02:00

ia64

ia64: copy_from_user() should zero the destination on access_ok() failure

2016-09-24 10:07:46 +02:00

m32r

m32r: fix __get_user()

2016-09-24 10:07:43 +02:00

m68k

m68k: Fix ndelay() macro

2016-12-15 08:49:23 -08:00

metag

metag/uaccess: Check access_ok in strncpy_from_user

2017-05-25 14:30:16 +02:00

microblaze

microblaze: fix copy_from_user()

2016-09-24 10:07:43 +02:00

mips

MIPS: Disallow outsized PTRACE_SETREGSET NT_PRFPREG regset accesses

2018-01-17 09:35:25 +01:00

mn10300

mn10300: copy_from_user() should zero on access_ok() failure...

2016-09-24 10:07:45 +02:00

nios2

nios2: reserve boot memory for device tree

2017-04-12 12:38:34 +02:00

openrisc

openrisc: fix issue handling 8 byte get_user calls

2017-12-20 10:04:54 +01:00

parisc

parisc: Fix alignment of pa_tlb_lock in assembly on 32-bit SMP kernel

2018-01-10 09:27:12 +01:00

powerpc

powerpc/perf: Dereference BHRB entries safely

2018-01-02 20:33:21 +01:00

s390

kernel: make groups_sort calling a responsibility group_info allocators

2018-01-10 09:27:10 +01:00

score

score: fix copy_from_user() and friends

2016-09-24 10:07:44 +02:00

sh

serial: sh-sci: Fix register offsets for the IRDA serial port

2017-11-15 17:13:10 +01:00

sparc

sparc64/mm: set fields in deferred pages

2017-12-16 10:33:55 +01:00

tile

mm: larger stack guard gap, between vmas

2017-06-26 07:13:11 +02:00

um

um: Don't discard .text.exit section

2016-09-07 08:32:38 +02:00

unicore32

Merge tag 'pwm/for-4.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/thierry.reding/linux-pwm

2015-11-11 09:16:10 -08:00

x86

kvm: vmx: Scrub hardware GPRs at VM-exit

2018-01-17 09:35:25 +01:00

xtensa

mm: larger stack guard gap, between vmas

2017-06-26 07:13:11 +02:00

.gitignore

…

Kconfig

…