[6.6] [Bugfix]: RISC-V KVM: Fix some null pointer dereference, UAF, Spectre-v1 issues · Pull Request !7044 · anolis/cloud-kernel

bugzilla: https://bugzilla.openanolis.cn/show_bug.cgi?id=35388

project: TC2025040201

反合上游riscv kvm一些fix补丁，解决空指针访问，UAF,Spectre-v1等问题。具体补丁列表如下：

- Fixes for issues discoverd by KVM API fuzzing in ...
11366ead4f14 RISC-V: KVM: Fix null pointer dereference in kvm_riscv_aia_imsic_has_attr()|
aeb1d17d1af5 RISC-V: KVM: Fix null pointer dereference in kvm_riscv_aia_imsic_rw_attr()
003b9dae53ae RISC-V: KVM: Skip IMSIC update if vCPU IMSIC state is not initialized

- Check host Ssaia extension when creating AIA irqchip
c61ec3e8cc5d RISC-V: KVM: Check host Ssaia extension when creating AIA irqchip

- Fix off-by-one array access in SBI PMU
5c1bb0787111 RISC-V: KVM: fix off-by-one array access in SBI PMU

- Fix potential null pointer dereference in kvm_riscv_vcpu_aia_rmw_topei()
c28eb189e481 RISC-V: KVM: Fix null pointer dereference in kvm_riscv_vcpu_aia_rmw_topei()

- Fix potential use-after-free issues
721ead775712 RISC-V: KVM: Fix use-after-free in kvm_riscv_aia_aplic_has_attr()
7120a9d9e023 RISC-V: KVM: Fix potential UAF in kvm_riscv_aia_imsic_has_attr()

- Prevent speculative out-of-bounds access
8565617a8599 KVM: riscv: Fix Spectre-v1 in APLIC interrupt handling
f9e26fc32541 KVM: riscv: Fix Spectre-v1 in ONE_REG register access
ec87a82ca874 KVM: riscv: Fix Spectre-v1 in AIA CSR access
8f0c15c4b14f KVM: riscv: Fix Spectre-v1 in floating-point register access
2dda6a9e09ee KVM: riscv: Fix Spectre-v1 in PMU counter access

类型	指派人员	状态
审查	winterddd fangyu0809	已完成 (0/0人)
测试	小龙已测试通过	已完成 (1/1人)

GVPanolis/cloud-kernel

搜索帮助

GVP anolis/cloud-kernel