Peter Shier ecec76885b KVM: nVMX: unconditionally cancel preemption timer in free_nested (CVE-2019-7221) ... Bugzilla: 1671904 There are multiple code paths where an hrtimer may have been started to emulate an L1 VMX preemption timer that can result in a call to free_nested without an intervening L2 exit where the hrtimer is normally cancelled. Unconditionally cancel in free_nested to cover all cases. Embargoed until Feb 7th 2019. Signed-off-by: Peter Shier <pshier@google.com> Reported-by: Jim Mattson <jmattson@google.com> Reviewed-by: Jim Mattson <jmattson@google.com> Reported-by: Felix Wilhelm <fwilhelm@google.com> Cc: stable@kernel.org Message-Id: <20181011184646.154065-1-pshier@google.com> Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>		2019-02-07 19:03:01 +01:00
..
boot	x86/boot/compressed/64: Set EFER.LME=1 in 32-bit trampoline before returning to long mode	2019-01-29 21:58:59 +01:00
configs	PCI: consolidate PCI config entry in drivers/pci	2018-11-23 11:45:34 +09:00
crypto	Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6	2018-12-27 13:53:32 -08:00
entry	x86/entry/64/compat: Fix stack switching for XEN PV	2019-01-18 00:39:33 +01:00
events	Merge branch 'x86-cleanups-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2018-12-26 17:03:51 -08:00
hyperv	x86/hyper-v: Add HvFlushGuestAddressList hypercall support	2018-12-21 11:28:39 +01:00
ia32	Remove 'type' argument from access_ok() function	2019-01-03 18:57:57 -08:00
include	Merge branch 'x86-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2019-02-03 09:08:12 -08:00
kernel	Merge branch 'x86-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2019-02-03 09:08:12 -08:00
kvm	KVM: nVMX: unconditionally cancel preemption timer in free_nested (CVE-2019-7221)	2019-02-07 19:03:01 +01:00
lib	x86: explicitly align IO accesses in memcpy_{to,from}io	2019-02-01 09:07:48 -08:00
math-emu	Remove 'type' argument from access_ok() function	2019-01-03 18:57:57 -08:00
mm	x86/fault: Fix sign-extend unintended sign extension	2019-01-29 21:58:59 +01:00
net	bpf: Add bpf_line_info support	2018-12-09 13:54:38 -08:00
oprofile	x86/oprofile: Fix bogus GCC-8 warning in nmi_setup()	2018-02-21 09:54:17 +01:00
pci	pci-v4.21-changes	2019-01-05 17:57:34 -08:00
platform	Merge branch 'x86-platform-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2018-12-26 18:42:51 -08:00
power	mm: remove include/linux/bootmem.h	2018-10-31 08:54:16 -07:00
purgatory	kbuild: move bin2c back to scripts/ from scripts/basic/	2018-07-18 01:18:05 +09:00
ras	…
realmode	x86-64/realmode: Add instruction suffix	2018-02-20 09:33:41 +01:00
tools	x86: Clean up 'sizeof x' => 'sizeof(x)'	2018-10-29 07:13:28 +01:00
um	Remove 'type' argument from access_ok() function	2019-01-03 18:57:57 -08:00
video	…
xen	xen: fixes for 5.0-rc3	2019-01-19 05:53:41 +12:00
.gitignore	x86/build: Add arch/x86/tools/insn_decoder_test to .gitignore	2018-02-13 14:10:29 +01:00
Kbuild	KVM: x86: Allow Qemu/KVM to use PVH entry point	2018-12-13 13:41:49 -05:00
Kconfig	x86/resctrl: Avoid confusion over the new X86_RESCTRL config	2019-02-02 10:34:52 +01:00
Kconfig.cpu	x86/cpu: Create Hygon Dhyana architecture support file	2018-09-27 16:14:05 +02:00
Kconfig.debug	x86/kconfig: Remove redundant 'default n' lines from all x86 Kconfig's	2018-10-17 08:39:42 +02:00
Makefile	jump_label: move 'asm goto' support test to Kconfig	2019-01-06 09:46:51 +09:00
Makefile.um	x86, powerpc: Remove -funit-at-a-time compiler option entirely	2018-12-09 11:55:32 +01:00
Makefile_32.cpu	…