Public bug reported:

If memory statistics are enabled for the memory baloon device in libvirt
like this:

<memballoon model='virtio'>
   <address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x0'/>
   <stats period='10'/>
</memballoon>

Then qemu exits with "qemu-system-x86_64: Virtqueue size exceeded" after
the VM is migrated or when starting the VM again after a managedsave.

This bug is present since 2.0.0+dfsg-2ubuntu1.26 and was not present in
2.0.0+dfsg-2ubuntu1.24. It's most probably caused by the Fix for
CVE-2016-5403.

Steps to reproduce:
1. Create a VM with libvirt which contains the above memory balloon device
2. Start the VM and let the Linux kernel boot (bug does not appear if the 
kernel is not yet booted,  eg. while in the PXE boot phase)
3. Issue a managedsave
4. Start the VM again
5. The VM is restored and "crashes" right after it starts running again.
6. You can find the qemu output "qemu-system-x86_64: Virtqueue size exceeded" 
in the log at /var/log/libvirt/vmname.log

ProblemType: Bug
DistroRelease: Ubuntu 14.04
Package: qemu-system-x86 2.0.0+dfsg-2ubuntu1.26
ProcVersionSignature: Ubuntu 3.13.0-93.140-generic 3.13.11-ckt39
Uname: Linux 3.13.0-93-generic x86_64
ApportVersion: 2.14.1-0ubuntu3.21
Architecture: amd64
Date: Thu Aug 11 08:39:33 2016
SourcePackage: qemu
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: qemu (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug third-party-packages trusty

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1612089

Title:
  Fix for CVE-2016-5403 causes crash on migration if memory stats are
  enabled

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/1612089/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to