It is possible to trigger use after free during HPT resize
causing host kernel to crash. More details and analysis of
the problem can be found in change with corresponding subject
(KVM: PPC: Book3S HV: Fix use after free in case of multiple
resize requests).
We need some changes to prepare for the fix, especially
make ->error in HPT resize instance single point for
tracking allocation state.
See individual commit description message to get more
information on changes presented.
v2:
Serhii Popovych: Tested with current 4.15-rc2 as host kernel on P8
with same testcase as for v1: no problems so far.
Serhii Popovych (2):
KVM: PPC: Book3S HV: Drop prepare_done from struct kvm_resize_hpt and
cleanups
KVM: PPC: Book3S HV: Fix use after free in case of multiple resize
requests
arch/powerpc/kvm/book3s_64_mmu_hv.c | 84 +++++++++++++++++++++++++------------
1 file changed, 57 insertions(+), 27 deletions(-)
--
1.8.3.1
--
To unsubscribe from this list: send the line "unsubscribe kvm-ppc" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
