From: Avi Kivity Date: Wed, 12 May 2010 08:48:18 +0000 (+0300) Subject: KVM: MMU: Segregate shadow pages with different cr0.wp X-Git-Tag: v2.6.35-rc1~436^2~2 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3dbe141595faa48a067add3e47bba3205b79d33c;p=pandora-kernel.git KVM: MMU: Segregate shadow pages with different cr0.wp When cr0.wp=0, we may shadow a gpte having u/s=1 and r/w=0 with an spte having u/s=0 and r/w=1. This allows excessive access if the guest sets cr0.wp=1 and accesses through this spte. Fix by making cr0.wp part of the base role; we'll have different sptes for the two cases and the problem disappears. Signed-off-by: Avi Kivity Signed-off-by: Marcelo Tosatti --- Reading git-diff-tree failed