Message ID | 20170928102928.14992-3-shrirang.bagul@canonical.com |
---|---|
State | New |
Headers | show |
Series | Fix CVE-2017-1000252 | expand |
diff --git a/virt/kvm/eventfd.c b/virt/kvm/eventfd.c index 49001fa84ead..ddc105a25a65 100644 --- a/virt/kvm/eventfd.c +++ b/virt/kvm/eventfd.c @@ -563,6 +563,8 @@ kvm_irqfd(struct kvm *kvm, struct kvm_irqfd *args) { if (args->flags & ~(KVM_IRQFD_FLAG_DEASSIGN | KVM_IRQFD_FLAG_RESAMPLE)) return -EINVAL; + if (args->gsi >= KVM_MAX_IRQ_ROUTES) + return -EINVAL; if (args->flags & KVM_IRQFD_FLAG_DEASSIGN) return kvm_irqfd_deassign(kvm, args);