From: Petr Matousek Date: Tue, 23 Sep 2014 18:22:30 +0000 (+0200) Subject: kvm: vmx: handle invvpid vm exit gracefully X-Git-Tag: v3.2.64~18 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3f09b1f1033b9a6350b72649c6abdafdf81e5c2d;p=pandora-kernel.git kvm: vmx: handle invvpid vm exit gracefully commit a642fc305053cc1c6e47e4f4df327895747ab485 upstream. On systems with invvpid instruction support (corresponding bit in IA32_VMX_EPT_VPID_CAP MSR is set) guest invocation of invvpid causes vm exit, which is currently not handled and results in propagation of unknown exit to userspace. Fix this by installing an invvpid vm exit handler. This is CVE-2014-3646. Signed-off-by: Petr Matousek Signed-off-by: Paolo Bonzini [bwh: Backported to 3.2: - Adjust filename - Drop inapplicable change to exit reason string array] Signed-off-by: Ben Hutchings --- Reading git-diff-tree failed