KVM: svm: unconditionally intercept #DB
authorPaolo Bonzini <pbonzini@redhat.com>
Tue, 10 Nov 2015 08:14:39 +0000 (09:14 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sun, 31 Jan 2016 19:23:31 +0000 (11:23 -0800)
commit19eaffefc4b03d92e0adfd1870b10b9539916106
tree648a1218a04409e7ec0ae8f5d1449cc8c8d02a61
parent03e572f3dda7f5790930df631a3f013f4100558b
KVM: svm: unconditionally intercept #DB

commit cbdb967af3d54993f5814f1cee0ed311a055377d upstream.

This is needed to avoid the possibility that the guest triggers
an infinite stream of #DB exceptions (CVE-2015-8104).

VMX is not affected: because it does not save DR6 in the VMCS,
it already intercepts #DB unconditionally.

Reported-by: Jan Beulich <jbeulich@suse.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
arch/x86/kvm/svm.c