KVM: x86: work around infinite loop in microcode when #AC is delivered

Browse source

It was found that a guest can DoS a host by triggering an infinite
stream of "alignment check" (#AC) exceptions.  This causes the
microcode to enter an infinite loop where the core never receives
another interrupt.  The host kernel panics pretty quickly due to the
effects (CVE-2015-5307).

Signed-off-by: Eric Northup <digitaleric@google.com>
Cc: stable@vger.kernel.org
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>

...

This commit is contained in:

Eric Northup 2015-11-03 18:03:53 +01:00 • committed by Paolo Bonzini

parent d0e536d893

commit 54a20552e1

3 changed files with 13 additions and 1 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

1

arch/x86/include/uapi/asm/svm.h

View file

8

arch/x86/kvm/svm.c

View file

5

arch/x86/kvm/vmx.c

View file