Wanpeng Li 38ab012f10 KVM: LAPIC: Fix pv ipis use-before-initialization ... Reported by syzkaller: BUG: unable to handle kernel NULL pointer dereference at 0000000000000014 PGD 800000040410c067 P4D 800000040410c067 PUD 40410d067 PMD 0 Oops: 0000 [#1] PREEMPT SMP PTI CPU: 3 PID: 2567 Comm: poc Tainted: G OE 4.19.0-rc5 #16 RIP: 0010:kvm_pv_send_ipi+0x94/0x350 [kvm] Call Trace: kvm_emulate_hypercall+0x3cc/0x700 [kvm] handle_vmcall+0xe/0x10 [kvm_intel] vmx_handle_exit+0xc1/0x11b0 [kvm_intel] vcpu_enter_guest+0x9fb/0x1910 [kvm] kvm_arch_vcpu_ioctl_run+0x35c/0x610 [kvm] kvm_vcpu_ioctl+0x3e9/0x6d0 [kvm] do_vfs_ioctl+0xa5/0x690 ksys_ioctl+0x6d/0x80 __x64_sys_ioctl+0x1a/0x20 do_syscall_64+0x83/0x6e0 entry_SYSCALL_64_after_hwframe+0x49/0xbe The reason is that the apic map has not yet been initialized, the testcase triggers pv_send_ipi interface by vmcall which results in kvm->arch.apic_map is dereferenced. This patch fixes it by checking whether or not apic map is NULL and bailing out immediately if that is the case. Fixes: 4180bf1b65 (KVM: X86: Implement "send IPI" hypercall) Reported-by: Wei Wu <ww9210@gmail.com> Cc: Paolo Bonzini <pbonzini@redhat.com> Cc: Radim Krčmář <rkrcmar@redhat.com> Cc: Wei Wu <ww9210@gmail.com> Signed-off-by: Wanpeng Li <wanpengli@tencent.com> Cc: stable@vger.kernel.org Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>		2018-11-27 12:48:56 +01:00
..
boot	x86: Clean up 'sizeof x' => 'sizeof(x)'	2018-10-29 07:13:28 +01:00
configs	x86/defconfig: Enable CONFIG_USB_XHCI_HCD=y	2018-10-10 08:29:51 +02:00
crypto	crypto: x86/aes-ni - fix build error following fpu template removal	2018-10-08 13:47:02 +08:00
entry	New gcc plugin: stackleak	2018-11-01 11:46:27 -07:00
events	perf/x86/intel/uncore: Support CoffeeLake 8th CBOX	2018-11-12 05:03:26 +01:00
hyperv	Merge branch 'x86-paravirt-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2018-10-23 17:54:58 +01:00
ia32	syscalls/x86: auto-create compat_sys_*() prototypes	2018-04-02 20:16:18 +02:00
include	Merge branch 'x86-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2018-11-11 16:41:50 -06:00
kernel	x86/cpu/vmware: Do not trace vmware_sched_clock()	2018-11-09 21:39:14 +01:00
kvm	KVM: LAPIC: Fix pv ipis use-before-initialization	2018-11-27 12:48:56 +01:00
lib	Merge branch 'x86-asm-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2018-10-23 15:24:22 +01:00
math-emu
mm	Merge branch 'core/urgent' into x86/urgent, to pick up objtool fix	2018-11-03 23:42:16 +01:00
net	bpf, x32: Fix regression caused by commit 24dea04767	2018-07-26 02:51:12 +02:00
oprofile	x86/oprofile: Fix bogus GCC-8 warning in nmi_setup()	2018-02-21 09:54:17 +01:00
pci	mm: remove include/linux/bootmem.h	2018-10-31 08:54:16 -07:00
platform	memblock: stop using implicit alignment to SMP_CACHE_BYTES	2018-10-31 08:54:16 -07:00
power	mm: remove include/linux/bootmem.h	2018-10-31 08:54:16 -07:00
purgatory	kbuild: move bin2c back to scripts/ from scripts/basic/	2018-07-18 01:18:05 +09:00
ras
realmode	x86-64/realmode: Add instruction suffix	2018-02-20 09:33:41 +01:00
tools	x86: Clean up 'sizeof x' => 'sizeof(x)'	2018-10-29 07:13:28 +01:00
um	Merge branch 'core/urgent' into x86/urgent, to pick up objtool fix	2018-11-03 23:42:16 +01:00
video
xen	Merge branch 'x86-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2018-11-11 16:41:50 -06:00
.gitignore	x86/build: Add arch/x86/tools/insn_decoder_test to .gitignore	2018-02-13 14:10:29 +01:00
Kbuild
Kconfig	x86/vsmp: Remove dependency on pv_irq_ops	2018-11-06 21:35:11 +01:00
Kconfig.cpu	x86/cpu: Create Hygon Dhyana architecture support file	2018-09-27 16:14:05 +02:00
Kconfig.debug	x86/kconfig: Remove redundant 'default n' lines from all x86 Kconfig's	2018-10-17 08:39:42 +02:00
Makefile	x86/build: Remove -pipe from KBUILD_CFLAGS	2018-11-05 16:45:32 +01:00
Makefile_32.cpu
Makefile.um	kbuild: rename LDFLAGS to KBUILD_LDFLAGS	2018-08-24 08:22:08 +09:00