openkylin
/
qemu
mirror of https://gitee.com/openkylin/qemu.git
9
0
Fork 0
Code Issues Projects Releases Wiki Activity
qemu/hw
History
Yuval Shaia 7b5d22fcb5 hw/pvrdma: Protect against buggy or malicious guest driver 
Guest driver allocates and initialize page tables to be used as a ring
of descriptors for CQ and async events.
The page table that represents the ring, along with the number of pages
in the page table is passed to the device.
Currently our device supports only one page table for a ring.

Let's make sure that the number of page table entries the driver
reports, do not exceeds the one page table size.

Reported-by: Soul Chen <soulchen8650@gmail.com>
Signed-off-by: Yuval Shaia <yuval.shaia.ml@gmail.com>
Fixes: CVE-2023-1544
Message-ID: <20230301142926.18686-1-yuval.shaia.ml@gmail.com>
Signed-off-by: Thomas Huth <thuth@redhat.com>
Signed-off-by: zeng_chi <zengchi@kylinos.cn>
 		2024-05-28 10:56:27 +08:00
..
9pfs 9pfs: prevent opening special files (CVE-2023-2861) 2024-03-18 16:43:45 +08:00
acpi acpi: cpuhp: fix guest-visible maximum access size to the legacy reg block 2023-07-26 09:04:22 +00:00
adc New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
alpha New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
arm New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
audio New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
avr New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
block New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
char New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
core New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
cpu New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
cris New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
cxl New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
display hw/display/qxl: Assert memory slot fits in preallocated MemoryRegion 2024-01-06 09:33:11 +08:00
dma New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
gpio New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
hppa New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
hyperv New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
i2c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
i386 set default machine type to be microvm if CONFIG_MICROVM is defined 2022-11-09 22:24:21 +08:00
ide hw/ide: reset: cancel async DMA operation before resetting state 2024-02-04 17:13:45 +08:00
input New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
intc New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
ipack New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
ipmi New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
isa New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
loongarch New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
m68k New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
mem New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
microblaze New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
mips New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
misc New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
net net: tulip: Restrict DMA engine to memories 2022-11-09 22:24:24 +08:00
nios2 New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
nubus New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
nvme hw/nvme: fix missing cq eventidx update 2023-10-30 09:28:53 +08:00
nvram New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
openrisc New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
pci New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
pci-bridge New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
pci-host New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
pcmcia New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
ppc New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
rdma hw/pvrdma: Protect against buggy or malicious guest driver 2024-05-28 10:56:27 +08:00
remote New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
riscv New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
rtc New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
rx New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
s390x New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
scsi hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) 2023-09-25 14:25:01 +08:00
sd New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
sensor New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
sh4 New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
smbios New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
sparc New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
sparc64 New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
ssi a few spelling fixes for the visible strings in binaries 2022-11-09 22:24:23 +08:00
timer New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
tpm New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
tricore New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
usb New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
vfio New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
virtio !5 virtio: add a new vcpu watchdog 2023-07-26 08:54:30 +00:00
watchdog New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
xen New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
xenpv New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
xtensa New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
Kconfig New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
meson.build New upstream version 7.1.0 2022-11-03 14:19:34 +08:00