References: CVE-2012-5525 XSA-32 bnc#789952 x86: get_page_from_gfn() must return NULL for invalid GFNs ... also in the non-translated case. This is XSA-32 / CVE-2012-5525. Signed-off-by: Jan Beulich Acked-by: Tim Deegan --- a/xen/include/asm-x86/p2m.h +++ b/xen/include/asm-x86/p2m.h @@ -400,7 +400,7 @@ static inline struct page_info *get_page if (t) *t = p2m_ram_rw; page = __mfn_to_page(gfn); - return get_page(page, d) ? page : NULL; + return mfn_valid(gfn) && get_page(page, d) ? page : NULL; }