Skip to content
Commit f84598bd authored by Quentin Casasnovas's avatar Quentin Casasnovas Committed by Borislav Petkov
Browse files

x86/microcode/intel: Guard against stack overflow in the loader



mc_saved_tmp is a static array allocated on the stack, we need to make
sure mc_saved_count stays within its bounds, otherwise we're overflowing
the stack in _save_mc(). A specially crafted microcode header could lead
to a kernel crash or potentially kernel execution.

Signed-off-by: default avatarQuentin Casasnovas <quentin.casasnovas@oracle.com>
Cc: "H. Peter Anvin" <hpa@zytor.com>
Cc: Fenghua Yu <fenghua.yu@intel.com>
Link: http://lkml.kernel.org/r/1422964824-22056-1-git-send-email-quentin.casasnovas@oracle.com


Signed-off-by: default avatarBorislav Petkov <bp@suse.de>
parent e36f014e
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment