diff options
| author | Paolo Bonzini <pbonzini@redhat.com> | 2014-02-27 22:54:11 +0100 |
|---|---|---|
| committer | Paolo Bonzini <pbonzini@redhat.com> | 2014-02-27 22:54:11 +0100 |
| commit | 1b385cbdd74aa803e966e01e5fe49490d6044e30 (patch) | |
| tree | ba74b3cac9727b3cacda97775729269b7f92781e /include/kvm/arm_vgic.h | |
| parent | kvm: x86: fix emulator buffer overflow (CVE-2014-0049) (diff) | |
| download | linux-1b385cbdd74aa803e966e01e5fe49490d6044e30.tar.xz linux-1b385cbdd74aa803e966e01e5fe49490d6044e30.zip | |
kvm, vmx: Really fix lazy FPU on nested guest
Commit e504c9098ed6 (kvm, vmx: Fix lazy FPU on nested guest, 2013-11-13)
highlighted a real problem, but the fix was subtly wrong.
nested_read_cr0 is the CR0 as read by L2, but here we want to look at
the CR0 value reflecting L1's setup. In other words, L2 might think
that TS=0 (so nested_read_cr0 has the bit clear); but if L1 is actually
running it with TS=1, we should inject the fault into L1.
The effective value of CR0 in L2 is contained in vmcs12->guest_cr0, use
it.
Fixes: e504c9098ed6acd9e1079c5e10e4910724ad429f
Reported-by: Kashyap Chamarty <kchamart@redhat.com>
Reported-by: Stefan Bader <stefan.bader@canonical.com>
Tested-by: Kashyap Chamarty <kchamart@redhat.com>
Tested-by: Anthoine Bourgeois <bourgeois@bertin.fr>
Cc: stable@vger.kernel.org
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Diffstat (limited to 'include/kvm/arm_vgic.h')
0 files changed, 0 insertions, 0 deletions