KVM: x86: Refactor prefix decoding to prevent Spectre-v1/L1TF attacks

Browse source

This fixes Spectre-v1/L1TF vulnerabilities in
vmx_read_guest_seg_selector(), vmx_read_guest_seg_base(),
vmx_read_guest_seg_limit() and vmx_read_guest_seg_ar().  When
invoked from emulation, these functions contain index computations
based on the (attacker-influenced) segment value.  Using constants
prevents the attack.

Cc: stable@vger.kernel.org
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>

...

This commit is contained in:

Marios Pomonis 2019-12-11 12:47:50 -08:00 • committed by Paolo Bonzini

parent 6ec4c5eee1

commit 125ffc5e0a

1 changed files with 14 additions and 2 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

16

arch/x86/kvm/emulate.c

View file