diff options
| author | Michael S. Tsirkin | 2021-12-21 15:45:44 +0100 |
|---|---|---|
| committer | Michael S. Tsirkin | 2022-01-06 12:11:38 +0100 |
| commit | 9bd6565ccee68f72d5012e24646e12a1c662827e (patch) | |
| tree | d4759ce3d001818e49cfe7adf0d22c220fa28d69 /linux-headers | |
| parent | virtio-mem: Don't skip alignment checks when warning about block size (diff) | |
| download | qemu-9bd6565ccee68f72d5012e24646e12a1c662827e.tar.gz qemu-9bd6565ccee68f72d5012e24646e12a1c662827e.tar.xz qemu-9bd6565ccee68f72d5012e24646e12a1c662827e.zip | |
acpi: validate hotplug selector on access
When bus is looked up on a pci write, we didn't
validate that the lookup succeeded.
Fuzzers thus can trigger QEMU crash by dereferencing the NULL
bus pointer.
Fixes: b32bd763a1 ("pci: introduce acpi-index property for PCI device")
Fixes: CVE-2021-4158
Cc: "Igor Mammedov" <imammedo@redhat.com>
Fixes: https://gitlab.com/qemu-project/qemu/-/issues/770
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com>
Reviewed-by: Ani Sinha <ani@anisinha.ca>
Diffstat (limited to 'linux-headers')
0 files changed, 0 insertions, 0 deletions