Re: [PATCH 1/3] KVM: x86: work around infinite loop in microcode when #AC is delivered

From	Venkatesh Srinivas <venkateshs@google.com>
Newsgroups	linux.kernel
Subject	Re: [PATCH 1/3] KVM: x86: work around infinite loop in microcode when #AC is delivered
Date	2015-11-11 01:40 +0100
Message-ID	<qtrCa-3Ub-21@gated-at.bofh.it> (permalink)
References	<qtgdH-505-11@gated-at.bofh.it> <qtgdH-505-9@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Tue, Nov 10, 2015 at 01:22:52PM +0100, Paolo Bonzini wrote:
> From: Eric Northup <digitaleric@google.com>
> 
> It was found that a guest can DoS a host by triggering an infinite
> stream of "alignment check" (#AC) exceptions.  This causes the
> microcode to enter an infinite loop where the core never receives
> another interrupt.  The host kernel panics pretty quickly due to the
> effects (CVE-2015-5307).
> 
> Signed-off-by: Eric Northup <digitaleric@google.com>
> Cc: stable@vger.kernel.org
> Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>

Tested-by: Venkatesh Srinivas <venkateshs@google.com>

-- vs;
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Back to linux.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

[PATCH 1/3] KVM: x86: work around infinite loop in microcode when #AC is delivered Paolo Bonzini <pbonzini@redhat.com> - 2015-11-10 13:30 +0100
  Re: [PATCH 1/3] KVM: x86: work around infinite loop in microcode  when #AC is delivered Venkatesh Srinivas <venkateshs@google.com> - 2015-11-11 01:40 +0100

csiph-web