mirror_ubuntu-kernels/arch/x86/kvm/vmx
Peter Shier ecec76885b KVM: nVMX: unconditionally cancel preemption timer in free_nested (CVE-2019-7221)
Bugzilla: 1671904

There are multiple code paths where an hrtimer may have been started to
emulate an L1 VMX preemption timer that can result in a call to free_nested
without an intervening L2 exit where the hrtimer is normally
cancelled. Unconditionally cancel in free_nested to cover all cases.

Embargoed until Feb 7th 2019.

Signed-off-by: Peter Shier <pshier@google.com>
Reported-by: Jim Mattson <jmattson@google.com>
Reviewed-by: Jim Mattson <jmattson@google.com>
Reported-by: Felix Wilhelm <fwilhelm@google.com>
Cc: stable@kernel.org
Message-Id: <20181011184646.154065-1-pshier@google.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
2019-02-07 19:03:01 +01:00
..
capabilities.h KVM: x86: Add Intel PT virtualization work mode 2018-12-21 11:28:34 +01:00
evmcs.c x86/kvm/hyper-v: nested_enable_evmcs() sets vmcs_version incorrectly 2019-01-25 19:11:37 +01:00
evmcs.h x86/kvm/hyper-v: Introduce nested_get_evmcs_version() helper 2018-12-14 17:59:54 +01:00
nested.c KVM: nVMX: unconditionally cancel preemption timer in free_nested (CVE-2019-7221) 2019-02-07 19:03:01 +01:00
nested.h KVM: nVMX: Move nested code to dedicated files 2018-12-14 17:59:46 +01:00
ops.h KVM: VMX: Move VMX instruction wrappers to a dedicated header file 2018-12-14 17:17:27 +01:00
pmu_intel.c
vmcs12.c KVM: nVMX: Move vmcs12 code to dedicated files 2018-12-14 12:34:30 +01:00
vmcs12.h KVM: nVMX: Move vmcs12 code to dedicated files 2018-12-14 12:34:30 +01:00
vmcs_shadow_fields.h
vmcs.h KVM: VMX: Move eVMCS code to dedicated files 2018-12-14 14:00:06 +01:00
vmenter.S KVM: VMX: Move VM-Enter + VM-Exit handling to non-inline sub-routines 2018-12-21 12:02:50 +01:00
vmx.c cpu/hotplug: Fix "SMT disabled by BIOS" detection for KVM 2019-01-30 19:27:00 +01:00
vmx.h KVM: VMX: Move VM-Enter + VM-Exit handling to non-inline sub-routines 2018-12-21 12:02:50 +01:00