On Thu, Oct 26 2017 at 3:45:46 pm BST, Paolo Bonzini <[email protected]> wrote: > On x86, ARM and s390, struct kvm_vcpu_arch has a usercopy region > taht is read and written by the KVM_GET/SET_CPUID2 ioctls (x86) > or KVM_GET/SET_ONE_REG (ARM/s390). Without whitelisting the area, > KVM is completely broken on those architectures with usercopy hardening > enabled. > > For now, allow writing to the entire struct on all architectures. > The KVM tree will not refine this to an architecture-specific > subset of struct kvm_vcpu_arch. > > Cc: [email protected] > Cc: Kees Cook <[email protected]> > Cc: Christian Borntraeger <[email protected]> > Cc: Christoffer Dall <[email protected]> > Cc: Radim Krčmář <[email protected]> > Signed-off-by: Paolo Bonzini <[email protected]>
Acked-by: Marc Zyngier <[email protected]> M. -- Jazz is not dead. It just smells funny.
