linux-stable/arch
Thijs Raymakers 33e974c2d5 KVM: x86: use array_index_nospec with indices that come from guest
commit c87bd4dd43 upstream.

min and dest_id are guest-controlled indices. Using array_index_nospec()
after the bounds checks clamps these values to mitigate speculative execution
side-channels.

Signed-off-by: Thijs Raymakers <thijs@raymakers.nl>
Cc: stable@vger.kernel.org
Cc: Sean Christopherson <seanjc@google.com>
Cc: Paolo Bonzini <pbonzini@redhat.com>
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Fixes: 715062970f ("KVM: X86: Implement PV sched yield hypercall")
Fixes: bdf7ffc899 ("KVM: LAPIC: Fix pv ipis out-of-bounds access")
Fixes: 4180bf1b65 ("KVM: X86: Implement "send IPI" hypercall")
Link: https://lore.kernel.org/r/20250804064405.4802-1-thijs@raymakers.nl
Signed-off-by: Sean Christopherson <seanjc@google.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2025-09-04 15:26:29 +02:00
..
alpha
arc
arm ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS 2025-08-28 16:26:10 +02:00
arm64 arm64: dts: ti: k3-am62-main: Remove eMMC High Speed DDR support 2025-08-28 16:26:15 +02:00
csky
hexagon
ia64
loongarch
m68k m68k: Fix lost column on framebuffer debug console 2025-08-28 16:26:05 +02:00
microblaze
mips mips: lantiq: xway: sysctrl: rename the etop node 2025-09-04 15:26:24 +02:00
nios2
openrisc
parisc parisc: Update comments in make_insert_tlb 2025-08-28 16:26:08 +02:00
powerpc powerpc/kvm: Fix ifdef to remove build warning 2025-09-04 15:26:26 +02:00
riscv
s390 s390/hypfs: Enable limited access during lockdown 2025-08-28 16:26:19 +02:00
sh
sparc
um
x86 KVM: x86: use array_index_nospec with indices that come from guest 2025-09-04 15:26:29 +02:00
xtensa
.gitignore
Kconfig