a2efa1fac4
Guest driver might execute HW commands when shared buffers are not yet
allocated.
This could happen on purpose (malicious guest) or because of some other
guest/host address mapping error.
We need to protect againts such case.
Fixes: CVE-2022-1050
Reported-by: Raven <wxhusst@gmail.com>
Signed-off-by: Yuval Shaia <yuval.shaia.ml@gmail.com>
Message-Id: <20220403095234.2210-1-yuval.shaia.ml@gmail.com>
Signed-off-by: Laurent Vivier <laurent@vivier.eu>
(cherry picked from commit
|
||
---|---|---|
.. | ||
pvrdma_cmd.c | ||
pvrdma_dev_ring.c | ||
pvrdma_dev_ring.h | ||
pvrdma_main.c | ||
pvrdma_qp_ops.c | ||
pvrdma_qp_ops.h | ||
pvrdma.h | ||
trace-events | ||
trace.h |