kvm: vmx: handle invvpid vm exit gracefully
authorPetr Matousek <pmatouse@redhat.com>
Tue, 23 Sep 2014 18:22:30 +0000 (20:22 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 14 Nov 2014 16:59:55 +0000 (08:59 -0800)
commit8b74c6f87d4baf5e48e44af2f90cda91ed7b848e
treedb787173d538c8130d3bba58226b6fa6641f041b
parent6dae4910cabb03b3a677facd8d1768fc47eef6ae
kvm: vmx: handle invvpid vm exit gracefully

commit a642fc305053cc1c6e47e4f4df327895747ab485 upstream.

On systems with invvpid instruction support (corresponding bit in
IA32_VMX_EPT_VPID_CAP MSR is set) guest invocation of invvpid
causes vm exit, which is currently not handled and results in
propagation of unknown exit to userspace.

Fix this by installing an invvpid vm exit handler.

This is CVE-2014-3646.

Signed-off-by: Petr Matousek <pmatouse@redhat.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
arch/x86/include/uapi/asm/vmx.h
arch/x86/kvm/vmx.c