Intel vmx does not restore GDT.LIMIT; this allows host userspace to look at some host kernel bits by loading a segment register and looking whether a trap happened or not.
Fix that by reloading GDT on heavyweight exits. Avi Kivity (2): KVM: VMX: Fix host GDT.LIMIT corruption KVM: VMX: Use host_gdt variable wherever we need the host gdt arch/x86/kvm/vmx.c | 19 ++++++++++--------- 1 files changed, 10 insertions(+), 9 deletions(-) -- To unsubscribe from this list: send the line "unsubscribe kvm" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html
