mshv_vtl: bounds-check cpu index in vtl mmap fault handler
authorYi Xie <xieyi@kylinos.cn>
Thu, 9 Jul 2026 02:19:47 +0000 (10:19 +0800)
committerWei Liu <wei.liu@kernel.org>
Fri, 31 Jul 2026 20:02:04 +0000 (20:02 +0000)
commit22dfdc17ceadd2783a609947af621a7f697b7765
tree2c655a57400cbdca9cad8d580bd90867a1986af0
parent72e3b0311aa90568a4b42a64445d1d3e1dc5a34d
mshv_vtl: bounds-check cpu index in vtl mmap fault handler

cpu is taken from pgoff & 0xffff.  cpu_online() does not reject cpu >=
nr_cpu_ids, and per_cpu_ptr() can then walk off __per_cpu_offset.

Signed-off-by: Yi Xie <xieyi@kylinos.cn>
Reviewed-by: Naman Jain <namjain@linux.microsoft.com>
Signed-off-by: Wei Liu <wei.liu@kernel.org>
drivers/hv/mshv_vtl_main.c