[Pkg-xen-changes] [xen] 01/06: x86: don't allow page table updates on non-PV page tables in do_mmu_update()
Ian James Campbell
ijc at moszumanska.debian.org
Tue Nov 25 14:30:32 UTC 2014
This is an automated email from the git hooks/post-receive script.
ijc pushed a commit to branch feature/bug770230
in repository xen.
commit 1fede59b83252d13347fc585a8228da4349b6ae8
Author: Jan Beulich <jbeulich at suse.com>
Date: Tue Nov 18 14:27:46 2014 +0100
x86: don't allow page table updates on non-PV page tables in do_mmu_update()
paging_write_guest_entry() and paging_cmpxchg_guest_entry() aren't
consistently supported for non-PV guests (they'd deref NULL for PVH or
non-HAP HVM ones). Don't allow respective MMU_* operations on the
page tables of such domains.
This is CVE-2014-8594 / XSA-109.
Signed-off-by: Jan Beulich <jbeulich at suse.com>
Acked-by: Tim Deegan <tim at xen.org>
master commit: e4292c5aac41b80f33d4877104348d5ee7c95aa4
master date: 2014-11-18 14:15:21 +0100
---
xen/arch/x86/mm.c | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/xen/arch/x86/mm.c b/xen/arch/x86/mm.c
index fdc5ed3..f88323f 100644
--- a/xen/arch/x86/mm.c
+++ b/xen/arch/x86/mm.c
@@ -3508,6 +3508,10 @@ long do_mmu_update(
{
p2m_type_t p2mt;
+ rc = -EOPNOTSUPP;
+ if ( unlikely(paging_mode_refcounts(pt_owner)) )
+ break;
+
xsm_needed |= XSM_MMU_NORMAL_UPDATE;
if ( get_pte_flags(req.val) & _PAGE_PRESENT )
{
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xen/xen.git
More information about the Pkg-xen-changes
mailing list