Messages in this thread | | | Date | Wed, 31 Oct 2018 12:39:53 -0700 (PDT) | Subject | Re: [PATCH net] vhost: Fix Spectre V1 vulnerability | From | David Miller <> |
| |
From: Jason Wang <jasowang@redhat.com> Date: Tue, 30 Oct 2018 14:10:49 +0800
> The idx in vhost_vring_ioctl() was controlled by userspace, hence a > potential exploitation of the Spectre variant 1 vulnerability. > > Fixing this by sanitizing idx before using it to index d->vqs. > > Cc: Michael S. Tsirkin <mst@redhat.com> > Cc: Josh Poimboeuf <jpoimboe@redhat.com> > Cc: Andrea Arcangeli <aarcange@redhat.com> > Signed-off-by: Jason Wang <jasowang@redhat.com>
Applied and queued up for -stable.
| |