]> xenbits.xensource.com Git - xen.git/commit
x86: don't allow page table updates on non-PV page tables in do_mmu_update()
authorJan Beulich <jbeulich@suse.com>
Tue, 18 Nov 2014 13:27:46 +0000 (14:27 +0100)
committerJan Beulich <jbeulich@suse.com>
Tue, 18 Nov 2014 13:27:46 +0000 (14:27 +0100)
commit2693b755b559ca007599572837f7e83ebdd1681c
treeac4512d3425880438373299b5014e18a77bac908
parent184e82513e3a4eb16b92e891d1d0ab719320c0ea
x86: don't allow page table updates on non-PV page tables in do_mmu_update()

paging_write_guest_entry() and paging_cmpxchg_guest_entry() aren't
consistently supported for non-PV guests (they'd deref NULL for PVH or
non-HAP HVM ones). Don't allow respective MMU_* operations on the
page tables of such domains.

This is CVE-2014-8594 / XSA-109.

Signed-off-by: Jan Beulich <jbeulich@suse.com>
Acked-by: Tim Deegan <tim@xen.org>
master commit: e4292c5aac41b80f33d4877104348d5ee7c95aa4
master date: 2014-11-18 14:15:21 +0100
xen/arch/x86/mm.c