x86/mm: fully honor PS bits in guest page table walks
authorJan Beulich <jbeulich@suse.com>
Tue, 17 May 2016 12:41:14 +0000 (14:41 +0200)
committerJan Beulich <jbeulich@suse.com>
Tue, 17 May 2016 12:41:14 +0000 (14:41 +0200)
commit46699c7393bd991234b5642763c5c24b6b39a6c4
treea8dfb3a1cc63bfd18017bf69398b5608720bb41d
parent2c86f0e1ac35b4c9e9502d969693f3264d3eda1e
x86/mm: fully honor PS bits in guest page table walks

In L4 entries it is currently unconditionally reserved (and hence
should, when set, always result in a reserved bit page fault), and is
reserved on hardware not supporting 1Gb pages (and hence should, when
set, similarly cause a reserved bit page fault on such hardware).

This is CVE-2016-4480 / XSA-176.

Signed-off-by: Jan Beulich <jbeulich@suse.com>
Reviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>
Tested-by: Andrew Cooper <andrew.cooper3@citrix.com>
xen/arch/x86/mm/guest_walk.c