Owen Hofmann 91e1f7b0eb kvm: x86: Check memopp before dereference (CVE-2016-8630) ...

commit d9092f52d7 upstream.

Commit 41061cdb98 ("KVM: emulate: do not initialize memopp") removes a
check for non-NULL under incorrect assumptions. An undefined instruction
with a ModR/M byte with Mod=0 and R/M-5 (e.g. 0xc7 0x15) will attempt
to dereference a null pointer here.

Fixes: 41061cdb98
Message-Id: <1477592752-126650-2-git-send-email-osh@google.com>
Signed-off-by: Owen Hofmann <osh@google.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2016-11-10 16:36:37 +01:00

..

boot

x86/build: Build compressed x86 kernels as PIE

2016-10-20 10:00:47 +02:00

configs

kconfig: tinyconfig: provide whole choice blocks to avoid warnings

2016-09-24 10:07:42 +02:00

crypto

crypto: sha1-mb - use corrcet pointer while completing jobs

2016-05-04 14:48:44 -07:00

entry

x86/syscalls/64: Add compat_sys_keyctl for 32-bit userspace

2016-08-16 09:30:50 +02:00

ia32

Merge branch 'x86-headers-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

2015-11-03 21:05:40 -08:00

include

Fix potential infoleak in older kernels

2016-11-10 16:36:34 +01:00

kernel

Revert "x86/mm: Expand the exception table logic to allow new handling options"

2016-10-31 19:56:26 -06:00

kvm

kvm: x86: Check memopp before dereference (CVE-2016-8630)

2016-11-10 16:36:37 +01:00

lguest

x86/paravirt: Prevent rtc_cmos platform device init on PV guests

2015-12-19 21:35:13 +01:00

lib

x86/uaccess/64: Handle the caching of 4-byte nocache copies properly in __copy_user_nocache()

2016-02-25 12:01:13 -08:00

math-emu

Merge branch 'x86-headers-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

2015-11-03 21:05:40 -08:00

mm

Revert "x86/mm: Expand the exception table logic to allow new handling options"

2016-10-31 19:56:26 -06:00

net

…

oprofile

…

pci

x86/platform/intel_mid_pci: Rework IRQ0 workaround

2016-08-20 18:09:27 +02:00

platform

Merge branch 'x86-platform-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

2015-11-03 21:33:18 -08:00

power

…

purgatory

…

ras

…

realmode

…

tools

…

um

um: Fix pointer cast

2015-12-22 15:31:51 -08:00

video

…

xen

x86/xen: fix upper bound of pmd loop in xen_cleanhighmap()

2016-11-10 16:36:36 +01:00

.gitignore

…

Kbuild

…

Kconfig

x86/microcode: Untangle from BLK_DEV_INITRD

2016-04-12 09:08:32 -07:00

Kconfig.cpu

x86/Kconfig/cpus: Fix/complete CPU type help texts

2015-10-21 11:12:56 +02:00

Kconfig.debug

x86: don't make DEBUG_WX default to 'y' even with DEBUG_RODATA

2015-11-06 09:12:41 -08:00

Makefile

Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

2015-11-04 09:11:12 -08:00

Makefile_32.cpu

…

Makefile.um

…