[prev in list] [next in list] [prev in thread] [next in thread]
List: oss-security
Subject: Re: [oss-security] CVE request: kvm: update_cr8_intercept() NULL
From: Josh Bressers <bressers () redhat ! com>
Date: 2009-10-24 17:09:04
Message-ID: 534900250.1591256404144642.JavaMail.root () zmail01 ! collab ! prod ! int ! phx2 ! redhat ! com
[Download RAW message or body]
Please use CVE-2009-3640.
Thanks.
--
JB
----- "Eugene Teo" <eugeneteo@kernel.sg> wrote:
> Quote from the upstream commit:
> "update_cr8_intercept() can be triggered from userspace while there
> is no apic present."
>
> http://git.kernel.org/linus/88c808fd42b53a7e01a2ac3253ef31fef74cb5af
>
> This one can be triggered via kvm_vcpu_ioctl() if /dev/kvm is user
> accessible (which is recommended...). Fixed in v2.6.32-rc1.
>
> Eugene
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic