File kvm-preXX-cr8-null-pointer.patch of Package kvm-kmp
This patch addresses bnc#549487 - CVE-2009-3640 --- a/x86/svm.c +++ b/x86/svm.c @@ -2334,7 +2334,8 @@ static void update_cr8_intercept(struct struct vmcb *vmcb = svm->vmcb; int max_irr, tpr; - if (!irqchip_in_kernel(vcpu->kvm) || vcpu->arch.apic->vapic_addr) + if (!irqchip_in_kernel(vcpu->kvm) || !vcpu->arch.apic || + vcpu->arch.apic->vapic_addr) return; vmcb->control.intercept_cr_write &= ~INTERCEPT_CR8_MASK;