dfaggioli/qemu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
c1c40509d2ac6fae90b95f71140e5062d21c9823
qemu/hw/virtio
History
Stefano Garzarella c067fb0633 vhost-vsock: detach the virqueue element in case of error 
Git-commit: 8d1b247f37
References: bsc#1198712, CVE-2022-26354

In vhost_vsock_common_send_transport_reset(), if an element popped from
the virtqueue is invalid, we should call virtqueue_detach_element() to
detach it from the virtqueue before freeing its memory.

Fixes: fc0b9b0e1c ("vhost-vsock: add virtio sockets device")
Fixes: CVE-2022-26354
Cc: qemu-stable@nongnu.org
Reported-by: VictorV <vv474172261@gmail.com>
Signed-off-by: Stefano Garzarella <sgarzare@redhat.com>
Message-Id: <20220228095058.27899-1-sgarzare@redhat.com>
Reviewed-by: Stefan Hajnoczi <stefanha@redhat.com>
Reviewed-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Dario Faggioli <dfaggioli@suse.com>
2023-07-31 19:20:26 +02:00
..
Kconfig
vhost-user-rng: Add vhost-user-rng implementation
2021-10-20 04:37:55 -04:00
meson.build
vhost-user-rng-pci: Add vhost-user-rng-pci implementation
2021-10-20 04:37:55 -04:00
trace-events
vdpa: Check for iova range at mappings changes
2021-10-20 04:37:55 -04:00
trace.h
trace: switch position of headers to what Meson requires
2020-08-21 06:18:24 -04:00
vhost-backend.c
hw/virtio: move vhost_set_backend_type() to vhost.c
2021-09-04 09:07:46 -04:00
vhost-scsi-pci.c
Use DECLARE_*CHECKER* macros
2020-09-09 09:27:09 -04:00
vhost-stub.c
vhost-user: simplify vhost_user_init/vhost_user_cleanup
2019-03-12 21:22:31 -04:00
vhost-user-blk-pci.c
Use DECLARE_*CHECKER* macros
2020-09-09 09:27:09 -04:00
vhost-user-fs-pci.c
vhost-user-fs: add the "bootindex" property
2021-01-13 09:06:37 -05:00
vhost-user-fs.c
vhost: Add Error parameter to vhost_dev_init()
2021-06-30 13:15:44 +02:00
vhost-user-i2c-pci.c
hw/virtio: add vhost-user-i2c-pci boilerplate
2021-07-16 11:10:45 -04:00
vhost-user-i2c.c
hw/virtio: add boilerplate for vhost-user-i2c device
2021-07-16 11:10:40 -04:00
vhost-user-input-pci.c
Use DECLARE_*CHECKER* macros
2020-09-09 09:27:09 -04:00
vhost-user-rng-pci.c
vhost-user-rng-pci: Add vhost-user-rng-pci implementation
2021-10-20 04:37:55 -04:00
vhost-user-rng.c
vhost-user-rng: Add vhost-user-rng implementation
2021-10-20 04:37:55 -04:00
vhost-user-scsi-pci.c
Use DECLARE_*CHECKER* macros
2020-09-09 09:27:09 -04:00
vhost-user-vsock-pci.c
vhost-user-vsock-pci: force virtio version 1
2020-09-29 02:15:24 -04:00
vhost-user-vsock.c
vhost-vsock: handle common features in vhost-vsock-common
2021-10-05 17:30:57 -04:00
vhost-user.c
vhost-user: fix duplicated notifier MR init
2021-10-20 04:37:55 -04:00
vhost-vdpa.c
vhost: Rename last_index to vq_index_end
2021-11-11 03:13:05 -05:00
vhost-vsock-common.c
vhost-vsock: detach the virqueue element in case of error
2023-07-31 19:20:26 +02:00
vhost-vsock-pci.c
vhost-vsock-pci: force virtio version 1
2020-09-29 02:15:24 -04:00
vhost-vsock.c
vhost-vsock: handle common features in vhost-vsock-common
2021-10-05 17:30:57 -04:00
vhost.c
memory: Name all the memory listeners
2021-09-30 15:30:24 +02:00
virtio-9p-pci.c
Use DECLARE_*CHECKER* macros
2020-09-09 09:27:09 -04:00
virtio-balloon-pci.c
hw/virtio/virtio-balloon: Remove the "class" property
2021-02-05 08:52:59 -05:00
virtio-balloon.c
virtio-balloon: correct used length
2021-11-29 08:49:36 -05:00
virtio-blk-pci.c
Use DECLARE_*CHECKER* macros
2020-09-09 09:27:09 -04:00
virtio-bus.c
virtio-bus: introduce iommu_enabled()
2021-09-04 16:35:17 -04:00
virtio-crypto-pci.c
Use DECLARE_*CHECKER* macros
2020-09-09 09:27:09 -04:00
virtio-crypto.c
virtio-crypto: don't modify elem->in/out_sg
2020-09-23 13:41:58 +01:00
virtio-input-host-pci.c
Use DECLARE_*CHECKER* macros
2020-09-09 09:27:09 -04:00
virtio-input-pci.c
Use OBJECT_DECLARE_SIMPLE_TYPE when possible
2020-09-18 14:12:32 -04:00
virtio-iommu-pci.c
virtio-iommu: Drop base_name and change generic_name
2021-10-20 04:37:55 -04:00
virtio-iommu.c
virtio-iommu: Handle non power of 2 range invalidations
2021-03-12 12:40:10 +00:00
virtio-mem-pci.c
qapi: Include qom-path in MEMORY_DEVICE_SIZE_CHANGE qapi events
2021-10-02 08:43:21 +02:00
virtio-mem-pci.h
Use DECLARE_*CHECKER* macros
2020-09-09 09:27:09 -04:00
virtio-mem.c
virtio-mem: Drop precopy notifier
2021-11-01 22:56:44 +01:00
virtio-mmio.c
virtio-mmio : fix the crash in the vm shutdown
2021-11-28 17:03:52 -05:00
virtio-net-pci.c
virtio-net: calculating proper msix vectors on init
2021-03-15 16:41:22 +08:00
virtio-pci.c
qbus: Rename qbus_create_inplace() to qbus_init()
2021-09-30 13:42:10 +01:00
virtio-pci.h
virtio-pci: compat page aligned ATS
2021-04-06 07:11:36 -04:00
virtio-pmem-pci.c
virtio-pmem-pci: force virtio version 1
2020-09-29 02:14:30 -04:00
virtio-pmem-pci.h
Use DECLARE_*CHECKER* macros
2020-09-09 09:27:09 -04:00
virtio-pmem.c
virtio-pmem: fix virtio_pmem_resp assign problem
2021-03-22 10:17:53 -04:00
virtio-rng-pci.c
Use DECLARE_*CHECKER* macros
2020-09-09 09:27:09 -04:00
virtio-rng.c
sysemu: Let VMChangeStateHandler take boolean 'running' argument
2021-03-09 23:13:57 +01:00
virtio-scsi-pci.c
Use DECLARE_*CHECKER* macros
2020-09-09 09:27:09 -04:00
virtio-serial-pci.c
Use DECLARE_*CHECKER* macros
2020-09-09 09:27:09 -04:00
virtio.c
virtio: use virtio accessor to access packed event
2021-11-15 09:44:46 -05:00