You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Andy Honig 338c7dbadd KVM: Improve create VCPU parameter (CVE-2013-4587) ... In multiple functions the vcpu_id is used as an offset into a bitfield. Ag malicious user could specify a vcpu_id greater than 255 in order to set or clear bits in kernel memory. This could be used to elevate priveges in the kernel. This patch verifies that the vcpu_id provided is less than 255. The api documentation already specifies that the vcpu_id must be less than max_vcpus, but this is currently not checked. Reported-by: Andrew Honig <ahonig@google.com> Cc: stable@vger.kernel.org Signed-off-by: Andrew Honig <ahonig@google.com> Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>		11 years ago
..
arm	ARM: KVM: Bugfix: vgic_bytemap_get_reg per cpu regs	12 years ago
Kconfig	kvm: Add VFIO device	11 years ago
assigned-dev.c	KVM: Move irq routing to generic code	12 years ago
async_pf.c	KVM: Drop FOLL_GET in GUP when doing async page fault	11 years ago
async_pf.h	KVM: Halt vcpu if page it tries to access is swapped out	14 years ago
coalesced_mmio.c	KVM: make checks stricter in coalesced_mmio_in_range()	13 years ago
coalesced_mmio.h	KVM: Make coalesced mmio use a device per zone	14 years ago
eventfd.c	kvm eventfd: switch to fdget	12 years ago
ioapic.c	KVM: Set TMR when programming ioapic entry	12 years ago
ioapic.h	KVM: Set TMR when programming ioapic entry	12 years ago
iodev.h	KVM: remove in_range from io devices	16 years ago
iommu.c	KVM: IOMMU: hva align mapping page size	11 years ago
irq_comm.c	KVM: Fix RTC interrupt coalescing tracking	12 years ago
irqchip.c	KVM: Move irq routing setup to irqchip.c	12 years ago
kvm_main.c	KVM: Improve create VCPU parameter (CVE-2013-4587)	11 years ago
vfio.c	kvm: Create non-coherent DMA registeration	11 years ago