Marcelo Tosatti 8705bd42c9 KVM: VMX: fix use after free of vmx->loaded_vmcs ...

commit 26a865f4aa upstream.

After free_loaded_vmcs executes, the "loaded_vmcs" structure
is kfreed, and now vmx->loaded_vmcs points to a kfreed area.
Subsequent free_loaded_vmcs then attempts to manipulate
vmx->loaded_vmcs.

Switch the order to avoid the problem.

https://bugzilla.redhat.com/show_bug.cgi?id=1047892

Reviewed-by: Jan Kiszka <jan.kiszka@siemens.com>
Signed-off-by: Marcelo Tosatti <mtosatti@redhat.com>
Cc: Josh Boyer <jwboyer@fedoraproject.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2014-03-31 09:58:14 -07:00

..

alpha

Merge tag 'gpio-for-linus' of git://git.secretlab.ca/git/linux

2013-05-09 09:59:16 -07:00

arc

ARC: Incorrect mm reference used in vmalloc fault handler

2013-11-13 12:05:32 +09:00

arm

ARM: highbank: avoid L2 cache smc calls when PL310 is not present

2014-03-31 09:58:13 -07:00

arm64

ARM64: unwind: Fix PC calculation

2014-03-06 21:30:12 -08:00

avr32

avr32: Makefile: add '-D__linux__' flag for gcc-4.4.7 use

2014-03-06 21:30:02 -08:00

blackfin

Merge tag 'for-linus' of git://github.com/realmz/blackfin-linux

2013-05-10 07:21:16 -07:00

c6x

arch: c6x: mm: include "asm/uaccess.h" to pass compiling

2013-07-21 18:21:29 -07:00

cris

cris: media platform drivers: fix build

2013-11-29 11:11:53 -08:00

frv

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

2013-05-01 14:08:52 -07:00

h8300

Merge tag 'modules-next-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux

2013-05-05 10:58:06 -07:00

hexagon

Merge tag 'gpio-for-linus' of git://git.secretlab.ca/git/linux

2013-05-09 09:59:16 -07:00

ia64

exec/ptrace: fix get_dumpable() incorrect tests

2013-11-29 11:11:44 -08:00

m32r

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

2013-05-01 14:08:52 -07:00

m68k

m68k/atari: ARAnyM - Fix NatFeat module support

2013-08-20 08:43:05 -07:00

metag

metag: fix mm/hugetlb.c build breakage

2013-06-19 06:23:34 -10:00

microblaze

microblaze: fix clone syscall

2013-08-20 08:43:02 -07:00

mips

MIPS: include linux/types.h

2014-03-23 21:38:20 -07:00

mn10300

mn10300: Use early_param() to parse "mem=" parameter

2013-06-28 16:53:03 +01:00

openrisc

Merge tag 'gpio-for-linus' of git://git.secretlab.ca/git/linux

2013-05-09 09:59:16 -07:00

parisc

parisc: fix cache-flushing

2014-02-06 11:08:17 -08:00

powerpc

powerpc: Align p_dyn, p_rela and p_st symbols

2014-03-23 21:38:14 -07:00

s390

s390: fix kernel crash due to linkage stack instructions

2014-02-22 12:41:26 -08:00

score

score: remove redundant kcore_list entries

2013-05-25 10:27:27 -07:00

sh

arch/sh/kernel/kgdb.c: add missing #include <linux/sched.h>

2014-02-13 13:47:59 -08:00

sparc

bpf: do not use reciprocal divide

2014-02-06 11:08:16 -08:00

tile

tile: remove compat_sys_lookup_dcookie declaration to fix compile error

2014-02-13 13:48:00 -08:00

um

uml: check length in exitcode_proc_write()

2013-11-13 12:05:33 +09:00

unicore32

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/signal

2013-05-10 09:21:05 -07:00

x86

KVM: VMX: fix use after free of vmx->loaded_vmcs

2014-03-31 09:58:14 -07:00

xtensa

xtensa: introduce spill_registers_kernel macro

2014-03-06 21:30:11 -08:00

.gitignore

…

Kconfig

microblaze: fix clone syscall

2013-08-20 08:43:02 -07:00