KVM: x86: work around infinite loop in microcode when #AC is delivered
authorEric Northup <digitaleric@google.com>
Tue, 3 Nov 2015 17:03:53 +0000 (18:03 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 9 Dec 2015 19:34:17 +0000 (14:34 -0500)
commit971cdbf756b5e29427ca8d94e0df3a25a66a7ed8
tree315ac4c8517fdbed08aebc06558696f45ce283ac
parent1e143e741de2129c896e49eed917b8ff1d6c65bf
KVM: x86: work around infinite loop in microcode when #AC is delivered

commit 54a20552e1eae07aa240fa370a0293e006b5faed upstream.

It was found that a guest can DoS a host by triggering an infinite
stream of "alignment check" (#AC) exceptions.  This causes the
microcode to enter an infinite loop where the core never receives
another interrupt.  The host kernel panics pretty quickly due to the
effects (CVE-2015-5307).

Signed-off-by: Eric Northup <digitaleric@google.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
arch/x86/include/uapi/asm/svm.h
arch/x86/kvm/svm.c
arch/x86/kvm/vmx.c