twx-linux

T

Maxim Levitsky 26af47bdc4 KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653)

[ upstream commit 0f923e0712 ]

* Invert the mask of bits that we pick from L2 in
  nested_vmcb02_prepare_control

* Invert and explicitly use VIRQ related bits bitmask in svm_clear_vintr

This fixes a security issue that allowed a malicious L1 to run L2 with
AVIC enabled, which allowed the L2 to exploit the uninitialized and enabled
AVIC to read/write the host physical memory at some offsets.

Fixes: 3d6368ef58 ("KVM: SVM: Add VMRUN handler")
Signed-off-by: Maxim Levitsky <mlevitsk@redhat.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2021-08-26 08:37:05 -04:00

arch

KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653)

2021-08-26 08:37:05 -04:00

block

blk-mq: Swap two calls in blk_mq_exit_queue()

2021-05-22 10:57:40 +02:00

certs

certs: Fix blacklist flag type confusion

2021-03-03 18:22:46 +01:00

crypto

crypto: shash - avoid comparing pointers to exported functions under CFI

2021-07-20 16:17:32 +02:00

Documentation

tweewide: Fix most Shebang lines

2021-06-03 08:36:11 +02:00

drivers

PCI/MSI: Enforce MSI[X] entry updates to be visible

2021-08-26 08:37:04 -04:00

firmware

…

ovl: prevent private clone if bind mount is not allowed

2021-08-15 13:03:33 +02:00

include

vmlinux.lds.h: Handle clang's module.{c,d}tor sections

2021-08-26 08:37:04 -04:00

init

pid: take a reference when initializing cad_pid

2021-06-10 12:43:51 +02:00

ipc

ipc/util.c: sysvipc_find_ipc() incorrectly updates position index

2020-05-20 08:17:07 +02:00

kernel

workqueue: fix UAF in pwq_unbound_release_workfn()

2021-08-04 12:22:14 +02:00

lib

lib/decompress_unlz4.c: correctly handle zero-padding around initrds.

2021-07-20 16:17:51 +02:00

bdi: Do not use freezable workqueue

2021-07-20 16:17:45 +02:00

net

mac80211: drop data frames without key on encrypted links

2021-08-26 08:37:05 -04:00

samples

samples/bpf: Fix the error return code of xdp_redirect's main()

2021-07-20 16:17:37 +02:00

scripts

scripts/tracing: fix the bug that can't parse raw_trace_func

2021-08-15 13:03:31 +02:00

security

smackfs: restrict bytes count in smk_set_cipso()

2021-07-20 16:17:48 +02:00

sound

ASoC: cs42l42: Remove duplicate control for WNF filter frequency

2021-08-26 08:37:01 -04:00

tools

Revert "perf map: Fix dso->nsinfo refcounting"

2021-08-04 12:22:17 +02:00

usr

initramfs: restore default compression behavior

2020-04-13 10:34:19 +02:00

virt

KVM: Use kvm_pfn_t for local PFN variable in hva_to_pfn_remapped()

2021-08-08 08:53:29 +02:00

.cocciconfig

…

.get_maintainer.ignore

…

.gitattributes

…

.gitignore

…

.mailmap

…

COPYING

…

CREDITS

…

Kbuild

…

Kconfig

…

MAINTAINERS

…

Makefile

Linux 4.14.244

2021-08-15 13:03:33 +02:00

README

…

README

Linux kernel
============

This file was moved to Documentation/admin-guide/README.rst

Please notice that there are several guides for kernel developers and users.
These guides can be rendered in a number of formats, like HTML and PDF.

In order to build the documentation, use ``make htmldocs`` or
``make pdfdocs``.

There are various text files in the Documentation/ subdirectory,
several of them using the Restructured Text markup notation.
See Documentation/00-INDEX for a list of what is contained in each file.

Please read the Documentation/process/changes.rst file, as it contains the
requirements for building and running the kernel, and information about
the problems which may result by upgrading your kernel.