x86: don't allow page table updates on non-PV page tables in do_mmu_update()
authorJan Beulich <jbeulich@suse.com>
Tue, 18 Nov 2014 13:15:21 +0000 (14:15 +0100)
committerJan Beulich <jbeulich@suse.com>
Tue, 18 Nov 2014 13:15:21 +0000 (14:15 +0100)
commite4292c5aac41b80f33d4877104348d5ee7c95aa4
tree6b743c1a4d59cc0ccc8f4e2aa45df609d94f4f14
parent0540b854f6733759593e829bc3f13c9b45974e32
x86: don't allow page table updates on non-PV page tables in do_mmu_update()

paging_write_guest_entry() and paging_cmpxchg_guest_entry() aren't
consistently supported for non-PV guests (they'd deref NULL for PVH or
non-HAP HVM ones). Don't allow respective MMU_* operations on the
page tables of such domains.

This is CVE-2014-8594 / XSA-109.

Signed-off-by: Jan Beulich <jbeulich@suse.com>
Acked-by: Tim Deegan <tim@xen.org>
xen/arch/x86/mm.c