x86: guard against undue super page PTE creation
authorJan Beulich <jbeulich@suse.com>
Thu, 29 Oct 2015 12:35:07 +0000 (13:35 +0100)
committerJan Beulich <jbeulich@suse.com>
Thu, 29 Oct 2015 12:35:07 +0000 (13:35 +0100)
commitfe360c90ea13f309ef78810f1a2b92f2ae3b30b8
tree18f810760a3d4b89b007069fe5ff0495e3e50785
parent1ef01396fdff88b1c3331a09ca5c69619b90f4ea
x86: guard against undue super page PTE creation

When optional super page support got added (commit bd1cd81d64 "x86: PV
support for hugepages"), two adjustments were missed: mod_l2_entry()
needs to consider the PSE and RW bits when deciding whether to use the
fast path, and the PSE bit must not be removed from L2_DISALLOW_MASK
unconditionally.

This is CVE-2015-7835 / XSA-148.

Reported-by: "栾尚聪(好风)" <shangcong.lsc@alibaba-inc.com>
Signed-off-by: Jan Beulich <jbeulich@suse.com>
Reviewed-by: Tim Deegan <tim@xen.org>
xen/arch/x86/mm.c