alistair23-linux/drivers/xen
Jan Beulich af6fc858a3 xen-pciback: limit guest control of command register
Otherwise the guest can abuse that control to cause e.g. PCIe
Unsupported Request responses by disabling memory and/or I/O decoding
and subsequently causing (CPU side) accesses to the respective address
ranges, which (depending on system configuration) may be fatal to the
host.

Note that to alter any of the bits collected together as
PCI_COMMAND_GUEST permissive mode is now required to be enabled
globally or on the specific device.

This is CVE-2015-2150 / XSA-120.

Signed-off-by: Jan Beulich <jbeulich@suse.com>
Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
Cc: <stable@vger.kernel.org>
Signed-off-by: David Vrabel <david.vrabel@citrix.com>
2015-03-11 14:34:40 +00:00
..
events xen/events: avoid NULL pointer dereference in dom0 on large machines 2015-03-06 13:16:32 +00:00
xen-pciback xen-pciback: limit guest control of command register 2015-03-11 14:34:40 +00:00
xenbus xenbus: Add proper handling of XS_ERROR from Xenbus for transactions. 2015-02-05 15:04:46 +00:00
xenfs
acpi.c
balloon.c xen: remove scratch frames for ballooned pages and m2p override 2015-01-28 14:03:10 +00:00
biomerge.c
cpu_hotplug.c
dbgp.c
efi.c
evtchn.c
fallback.c
features.c
gntalloc.c
gntdev.c xen/gntdev: provide find_special_page VMA operation 2015-01-28 14:04:58 +00:00
grant-table.c xen/grant-table: add a mechanism to safely unmap pages that are in use 2015-01-28 14:03:14 +00:00
Kconfig
Makefile x86/xen: allow privcmd hypercalls to be preempted 2015-02-23 16:30:24 +00:00
manage.c xen/manage: Fix USB interaction issues when resuming 2015-02-06 15:49:09 +00:00
mcelog.c
pci.c
pcpu.c
platform-pci.c
preempt.c x86/xen: allow privcmd hypercalls to be preempted 2015-02-23 16:30:24 +00:00
privcmd.c x86/xen: allow privcmd hypercalls to be preempted 2015-02-23 16:30:24 +00:00
privcmd.h
swiotlb-xen.c Revert "swiotlb-xen: pass dev_addr to swiotlb_tbl_unmap_single" 2014-12-10 14:58:35 +00:00
sys-hypervisor.c
tmem.c xen/tmem: mark xen_tmem_init() __init 2015-01-23 11:55:24 +00:00
xen-acpi-cpuhotplug.c
xen-acpi-memhotplug.c ACPICA: Resources: Provide common part for struct acpi_resource_address structures. 2015-01-26 16:09:56 +01:00
xen-acpi-pad.c
xen-acpi-processor.c
xen-balloon.c
xen-scsiback.c xen-scsiback: mark pvscsi frontend request consumed only after last read 2015-02-23 16:30:25 +00:00
xen-selfballoon.c
xen-stub.c