From mboxrd@z Thu Jan 1 00:00:00 1970 From: Avi Kivity Subject: [PATCH 0/2] Fix GDT limit corruption on Intel Date: Mon, 26 Jul 2010 18:32:37 +0300 Message-ID: <1280158359-26593-1-git-send-email-avi@redhat.com> To: Marcelo Tosatti , kvm@vger.kernel.org Return-path: Received: from mx1.redhat.com ([209.132.183.28]:28217 "EHLO mx1.redhat.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1754461Ab0GZPcl (ORCPT ); Mon, 26 Jul 2010 11:32:41 -0400 Received: from int-mx05.intmail.prod.int.phx2.redhat.com (int-mx05.intmail.prod.int.phx2.redhat.com [10.5.11.18]) by mx1.redhat.com (8.13.8/8.13.8) with ESMTP id o6QFWfgL007003 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Mon, 26 Jul 2010 11:32:41 -0400 Received: from cleopatra.tlv.redhat.com (cleopatra.tlv.redhat.com [10.35.255.11]) by int-mx05.intmail.prod.int.phx2.redhat.com (8.13.8/8.13.8) with ESMTP id o6QFWeIB020282 for ; Mon, 26 Jul 2010 11:32:40 -0400 Sender: kvm-owner@vger.kernel.org List-ID: Intel vmx does not restore GDT.LIMIT; this allows host userspace to look at some host kernel bits by loading a segment register and looking whether a trap happened or not. Fix that by reloading GDT on heavyweight exits. Avi Kivity (2): KVM: VMX: Fix host GDT.LIMIT corruption KVM: VMX: Use host_gdt variable wherever we need the host gdt arch/x86/kvm/vmx.c | 19 ++++++++++--------- 1 files changed, 10 insertions(+), 9 deletions(-)