diff options
author | Paolo Bonzini <pbonzini@redhat.com> | 2015-11-10 09:14:39 +0100 |
---|---|---|
committer | Paolo Bonzini <pbonzini@redhat.com> | 2015-11-10 12:06:24 +0100 |
commit | cbdb967af3d54993f5814f1cee0ed311a055377d (patch) | |
tree | b5774c71fc96cb10560267ca47655abde5ceb401 /arch/x86/kvm/Kconfig | |
parent | 54a20552e1eae07aa240fa370a0293e006b5faed (diff) |
KVM: svm: unconditionally intercept #DB
This is needed to avoid the possibility that the guest triggers
an infinite stream of #DB exceptions (CVE-2015-8104).
VMX is not affected: because it does not save DR6 in the VMCS,
it already intercepts #DB unconditionally.
Reported-by: Jan Beulich <jbeulich@suse.com>
Cc: stable@vger.kernel.org
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Diffstat (limited to 'arch/x86/kvm/Kconfig')
0 files changed, 0 insertions, 0 deletions