tree b5774c71fc96cb10560267ca47655abde5ceb401
parent 54a20552e1eae07aa240fa370a0293e006b5faed
author Paolo Bonzini <pbonzini@redhat.com> 1447143279 +0100
committer Paolo Bonzini <pbonzini@redhat.com> 1447153584 +0100

KVM: svm: unconditionally intercept #DB

This is needed to avoid the possibility that the guest triggers
an infinite stream of #DB exceptions (CVE-2015-8104).

VMX is not affected: because it does not save DR6 in the VMCS,
it already intercepts #DB unconditionally.

Reported-by: Jan Beulich <jbeulich@suse.com>
Cc: stable@vger.kernel.org
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>