Re: [PATCH] KVM: x86: fix wbinvd_dirty_mask use-after-free

From	Radim Krčmář <rkrcmar@redhat.com>
Newsgroups	linux.kernel
Subject	Re: [PATCH] KVM: x86: fix wbinvd_dirty_mask use-after-free
Date	2016-10-24 17:30 +0200
Message-ID	<svPmi-ZI-37@gated-at.bofh.it> (permalink)
References	<suLb4-8f6-39@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

2016-10-21 12:39-0400, Ido Yariv:
> vcpu->arch.wbinvd_dirty_mask may still be used after freeing it,
> corrupting memory. For example, the following call trace may set a bit
> in an already freed cpu mask:
>     kvm_arch_vcpu_load
>     vcpu_load
>     vmx_free_vcpu_nested
>     vmx_free_vcpu
>     kvm_arch_vcpu_free
> 
> Fix this by deferring freeing of wbinvd_dirty_mask.
> 
> Cc: stable@vger.kernel.org
> Signed-off-by: Ido Yariv <ido@wizery.com>
> ---

Applied, thanks.

Back to linux.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

[PATCH] KVM: x86: fix wbinvd_dirty_mask use-after-free Ido Yariv <ido@wizery.com> - 2016-10-21 18:50 +0200
  Re: [PATCH] KVM: x86: fix wbinvd_dirty_mask use-after-free Paolo Bonzini <pbonzini@redhat.com> - 2016-10-24 16:20 +0200
  Re: [PATCH] KVM: x86: fix wbinvd_dirty_mask use-after-free Radim Krčmář <rkrcmar@redhat.com> - 2016-10-24 17:30 +0200

csiph-web