diff options
author | Nadav Amit <nadav.amit@gmail.com> | 2015-01-08 05:59:03 -0500 |
---|---|---|
committer | Paolo Bonzini <pbonzini@redhat.com> | 2015-01-23 07:56:56 -0500 |
commit | 63ea0a49ae0b145b91ff2b070c01b66fc75854b9 (patch) | |
tree | ae3f08e47d20f4f1dccf8433ca23280c98d828c4 /arch/x86/kvm/emulate.c | |
parent | cdef511985374dd042a40bb32c1c346c2662c9dc (diff) |
KVM: x86: Fix of previously incomplete fix for CVE-2014-8480
STR and SLDT with rip-relative operand can cause a host kernel oops.
Mark them as DstMem as well.
Cc: stable@vger.linux.org
Signed-off-by: Nadav Amit <namit@cs.technion.ac.il>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Diffstat (limited to 'arch/x86/kvm/emulate.c')
-rw-r--r-- | arch/x86/kvm/emulate.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/arch/x86/kvm/emulate.c b/arch/x86/kvm/emulate.c index 169b09d76ddd..817c6ca2c4fb 100644 --- a/arch/x86/kvm/emulate.c +++ b/arch/x86/kvm/emulate.c | |||
@@ -3791,8 +3791,8 @@ static const struct opcode group5[] = { | |||
3791 | }; | 3791 | }; |
3792 | 3792 | ||
3793 | static const struct opcode group6[] = { | 3793 | static const struct opcode group6[] = { |
3794 | DI(Prot, sldt), | 3794 | DI(Prot | DstMem, sldt), |
3795 | DI(Prot, str), | 3795 | DI(Prot | DstMem, str), |
3796 | II(Prot | Priv | SrcMem16, em_lldt, lldt), | 3796 | II(Prot | Priv | SrcMem16, em_lldt, lldt), |
3797 | II(Prot | Priv | SrcMem16, em_ltr, ltr), | 3797 | II(Prot | Priv | SrcMem16, em_ltr, ltr), |
3798 | N, N, N, N, | 3798 | N, N, N, N, |