]> code.ossystems Code Review - meta-freescale.git/commit
kvm-iommu: CVE-2014-3601, CVE-2014-8369
authorSona Sarmadi <sona.sarmadi@enea.com>
Tue, 27 Jan 2015 09:22:10 +0000 (10:22 +0100)
committerZhenhua Luo <zhenhua.luo@freescale.com>
Tue, 3 Feb 2015 02:05:41 +0000 (10:05 +0800)
commit8cde62241772c928769ae77344325e741c414e0f
treef4d19a19326b2fdb60a702eef1bbd39994e51f7b
parent2d64414dded202975082a0531fcfb4461256bf2d
kvm-iommu: CVE-2014-3601, CVE-2014-8369

CVE-2014-3601
Fixes the third parameter of kvm_iommu_put_pages
The third parameter of kvm_iommu_put_pages is wrong,
It should be 'gfn - slot->base_gfn'.

CVE-2014-8369
Fixes excessive pages un-pinning in kvm_iommu_map error path.
(This vulnerability exists because of an incorrect fix for CVE-2014-3601

Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3601
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8369
https://bugzilla.redhat.com/show_bug.cgi?id=1156518
https://lkml.org/lkml/2014/10/24/460

Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
meta-fsl-ppc/recipes-kernel/linux/files/0001-kvm-iommu-CVE-2014-3601.patch [new file with mode: 0644]
meta-fsl-ppc/recipes-kernel/linux/files/0002-kvm-iommu-CVE-2014-8369.patch [new file with mode: 0644]
meta-fsl-ppc/recipes-kernel/linux/linux-qoriq_3.12.bb