Hi, The following commits fix CVE-2013-4592 and they should be included in stable kernels <= 3.8 (the first one is already in 3.8): commit 12d6e7538e2d418c08f082b1b44ffa5fb7270ed8 Author: Marcelo Tosatti <mtosatti@xxxxxxxxxx> Date: Fri Aug 24 15:54:58 2012 -0300 KVM: perform an invalid memslot step for gpa base change PPC must flush all translations before the new memory slot is visible. Signed-off-by: Marcelo Tosatti <mtosatti@xxxxxxxxxx> Signed-off-by: Avi Kivity <avi@xxxxxxxxxx> commit e40f193f5bb022e927a57a4f5d5194e4f12ddb74 Author: Alex Williamson <alex.williamson@xxxxxxxxxx> Date: Mon Dec 10 10:32:57 2012 -0700 KVM: Fix iommu map/unmap to handle memory slot moves The iommu integration into memory slots expects memory slots to be added or removed and doesn't handle the move case. We can unmap slots from the iommu after we mark them invalid and map them before installing the final memslot array. Also re-order the kmemdup vs map so we don't leave iommu mappings if we get ENOMEM. Reviewed-by: Gleb Natapov <gleb@xxxxxxxxxx> Signed-off-by: Alex Williamson <alex.williamson@xxxxxxxxxx> Signed-off-by: Marcelo Tosatti <mtosatti@xxxxxxxxxx> Cheers, -- Luis -- To unsubscribe from this list: send the line "unsubscribe stable" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html