KVM: VMX: Fix incorrect rcu deref in rmode_tss_base()

Signed-off-by: Avi Kivity <avi@redhat.com>

diff --git a/arch/x86/kvm/vmx.c b/arch/x86/kvm/vmx.c
index 01b054c981392add5a5b2b56e9d193d596c5577d..26ba61d6af8cca114b1089201ba0e4da96b08baa 100644 (file)
--- a/arch/x86/kvm/vmx.c
+++ b/arch/x86/kvm/vmx.c
@@ -1688,7 +1688,7 @@ static gva_t rmode_tss_base(struct kvm *kvm)
                gfn_t base_gfn;
 
                slots = kvm_memslots(kvm);
-               base_gfn = kvm->memslots->memslots[0].base_gfn +
+               base_gfn = slots->memslots[0].base_gfn +
                                 kvm->memslots->memslots[0].npages - 3;
                return base_gfn << PAGE_SHIFT;
        }