TWxSoftware/twx-linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
976,697 Commits 27 Branches 5,274 Tags
3dc5666baf2a135f250e4101d41d5959ac2c2e1f
T
Clone
Open with VS Code Open with VSCodium Open with Intellij IDEA
Download ZIP Download TAR.GZ Download BUNDLE
Maxim Levitsky 3dc5666baf KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (CVE-2021-3656) 
commit c7dfa40099 upstream.

If L1 disables VMLOAD/VMSAVE intercepts, and doesn't enable
Virtual VMLOAD/VMSAVE (currently not supported for the nested hypervisor),
then VMLOAD/VMSAVE must operate on the L1 physical memory, which is only
possible by making L0 intercept these instructions.

Failure to do so allowed the nested guest to run VMLOAD/VMSAVE unintercepted,
and thus read/write portions of the host physical memory.

Fixes: 89c8a4984f ("KVM: SVM: Enable Virtual VMLOAD VMSAVE feature")

Suggested-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Maxim Levitsky <mlevitsk@redhat.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-08-18 08:59:18 +02:00
arch
KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (CVE-2021-3656)
2021-08-18 08:59:18 +02:00
block
blk-iolatency: error out if blk_get_queue() failed in iolatency_set_limit()
2021-08-12 13:22:08 +02:00
certs
certs: add 'x509_revocation_list' to gitignore
2021-07-20 16:05:35 +02:00
crypto
crypto: sm2 - fix a memory leak in sm2
2021-07-14 16:56:06 +02:00
Documentation
Documentation: Fix intiramfs script name
2021-07-28 14:35:47 +02:00
drivers
efi/libstub: arm64: Double check image alignment at entry
2021-08-18 08:59:17 +02:00
fs
ceph: take snap_empty_lock atomically with snaprealm refcount change
2021-08-18 08:59:18 +02:00
include
vmlinux.lds.h: Handle clang's module.{c,d}tor sections
2021-08-18 08:59:18 +02:00
init
sched/core: Initialize the idle task with preemption disabled
2021-07-14 16:55:50 +02:00
ipc
ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry
2021-05-26 12:06:54 +02:00
kernel
genirq/timings: Prevent potential array overflow in __irq_timings_store()
2021-08-18 08:59:15 +02:00
lib
net: add kcov handle to skb extensions
2021-07-28 14:35:33 +02:00
LICENSES
LICENSES/deprecated: add Zlib license text
2020-09-16 14:33:49 +02:00
mm
memblock: make for_each_mem_range() traverse MEMBLOCK_HOTPLUG regions
2021-07-28 14:35:46 +02:00
net
vsock/virtio: avoid potential deadlock when vsock device remove
2021-08-18 08:59:14 +02:00
samples
samples/bpf: Fix the error return code of xdp_redirect's main()
2021-07-14 16:56:23 +02:00
scripts
scripts/tracing: fix the bug that can't parse raw_trace_func
2021-08-12 13:22:12 +02:00
security
bpf: Add lockdown check for probe_write_user helper
2021-08-15 14:00:25 +02:00
sound
ASoC: cs42l42: Fix LRCLK frame start edge
2021-08-18 08:59:09 +02:00
tools
libbpf: Fix probe for BPF_PROG_TYPE_CGROUP_SOCKOPT
2021-08-18 08:59:09 +02:00
usr
Merge branch 'work.fdpic' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2020-08-07 13:29:39 -07:00
virt
KVM: Do not leak memory for duplicate debugfs directories
2021-08-12 13:22:17 +02:00
.clang-format
Merge tag 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma
2020-10-17 11:18:18 -07:00
.cocciconfig
…
.get_maintainer.ignore
…
.gitattributes
…
.gitignore
kbuild: generate Module.symvers only when vmlinux exists
2021-05-19 10:12:59 +02:00
.mailmap
mailmap: add two more addresses of Uwe Kleine-König
2020-12-06 10:19:07 -08:00
COPYING
…
CREDITS
MAINTAINERS: Move Jason Cooper to CREDITS
2020-11-30 10:20:34 +01:00
Kbuild
…
Kconfig
…
MAINTAINERS
f2fs: move ioctl interface definitions to separated file
2021-05-19 10:13:00 +02:00
Makefile
Linux 5.10.59
2021-08-15 14:00:27 +02:00
README
…

README 

Linux kernel
============

There are several guides for kernel developers and users. These guides can
be rendered in a number of formats, like HTML and PDF. Please read
Documentation/admin-guide/README.rst first.

In order to build the documentation, use ``make htmldocs`` or
``make pdfdocs``.  The formatted documentation can also be read online at:

    https://www.kernel.org/doc/html/latest/

There are various text files in the Documentation/ subdirectory,
several of them using the Restructured Text markup notation.

Please read the Documentation/process/changes.rst file, as it contains the
requirements for building and running the kernel, and information about
the problems which may result by upgrading your kernel.
Reference in New Issue View Git Blame Copy Permalink
S
Description
TWx Linux Repository
Readme 6.1 GiB
Languages
C 97.6%
Assembly 1%
Shell 0.5%
Python 0.3%
Makefile 0.3%