)]}'
{
  "commit": "dac2f68ae624dfc4d9fce8853cda28292862c33d",
  "tree": "3a7b2d0a29bbcfc8c0445691ccd84100d61151be",
  "parents": [
    "7f9ad251048878b9b4e1f079327dbf75c1fae5f2"
  ],
  "author": {
    "name": "Sean Christopherson",
    "email": "seanjc@google.com",
    "time": "Wed Feb 02 00:49:43 2022 +0000"
  },
  "committer": {
    "name": "COS Cherry Picker",
    "email": "cloud-image-release@prod.google.com",
    "time": "Thu Aug 25 16:37:31 2022 -0700"
  },
  "message": "KVM: x86: Use __try_cmpxchg_user() to update guest PTE A/D bits\n\nUse the recently introduced __try_cmpxchg_user() to update guest PTE A/D\nbits instead of mapping the PTE into kernel address space.  The VM_PFNMAP\npath is broken as it assumes that vm_pgoff is the base pfn of the mapped\nVMA range, which is conceptually wrong as vm_pgoff is the offset relative\nto the file and has nothing to do with the pfn.  The horrific hack worked\nfor the original use case (backing guest memory with /dev/mem), but leads\nto accessing \"random\" pfns for pretty much any other VM_PFNMAP case.\n\nBUG\u003db/242694075\nTEST\u003dhttp://sponge2/c688d143-1317-4d74-b599-ac56600b5648\nRELEASE_NOTE\u003dFixed CVE-2022-1158 in Linux Kernel\nSOURCE\u003dUPSTREAM(f122dfe4476890d60b8c679128cd2259ec96a24c)\n\ncos-patch: security-high\nFixes: bd53cb35a3e9 (\"X86/KVM: Handle PFNs outside of kernel reach when touching GPTEs\")\nDebugged-by: Tadeusz Struk \u003ctadeusz.struk@linaro.org\u003e\nTested-by: Tadeusz Struk \u003ctadeusz.struk@linaro.org\u003e\nReported-by: syzbot+6cde2282daa792c49ab8@syzkaller.appspotmail.com\nCc: stable@vger.kernel.org\nSigned-off-by: Sean Christopherson \u003cseanjc@google.com\u003e\nMessage-Id: \u003c20220202004945.2540433-4-seanjc@google.com\u003e\nSigned-off-by: Paolo Bonzini \u003cpbonzini@redhat.com\u003e\nChange-Id: I8eab2801d2a6c322f5530f2e14214d5623d85010\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/36287\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nMain-Branch-Verified: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nReviewed-by: Meena Shanmugam \u003cmeenashanmugam@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "a1811f51eda925b9eacdc5255b20e68a490247ee",
      "old_mode": 33188,
      "old_path": "arch/x86/kvm/mmu/paging_tmpl.h",
      "new_id": "7dd3463f524098ce87b383d31415891f40b135a2",
      "new_mode": 33188,
      "new_path": "arch/x86/kvm/mmu/paging_tmpl.h"
    }
  ]
}