| commit | cbdb967af3d54993f5814f1cee0ed311a055377d | [log] [tgz] |
|---|---|---|
| author | Paolo Bonzini <pbonzini@redhat.com> | Tue Nov 10 09:14:39 2015 +0100 |
| committer | Paolo Bonzini <pbonzini@redhat.com> | Tue Nov 10 12:06:24 2015 +0100 |
| tree | b5774c71fc96cb10560267ca47655abde5ceb401 | |
| parent | 54a20552e1eae07aa240fa370a0293e006b5faed [diff] |
KVM: svm: unconditionally intercept #DB This is needed to avoid the possibility that the guest triggers an infinite stream of #DB exceptions (CVE-2015-8104). VMX is not affected: because it does not save DR6 in the VMCS, it already intercepts #DB unconditionally. Reported-by: Jan Beulich <jbeulich@suse.com> Cc: stable@vger.kernel.org Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>