In the Linux kernel, the following vulnerability has been resolved: drm/xe/hmm: Don't dereference struct page pointers without notifier lock The pnfs that we obtain from hmmrangefault() point to pages that we don't have a reference on, and the guarantee that they are still in the cpu page-tables is that the notifier lock must be held and the notifier seqno is still valid. So while building the sg table and marking the pages accesses / dirty we need to hold this lock with a validated seqno. However, the lock is reclaim tainted which makes sgalloctablefrompagessegment() unusable, since it internally allocates memory. Instead build the sg-table manually. For the non-iommu case this might lead to fewer coalesces, but if that's a problem it can be fixed up later in the resource cursor code. For the iommu case, the whole sg-table may still be coalesced to a single contigous device va region. This avoids marking pages that we don't own dirty and accessed, and it also avoid dereferencing struct pages that we don't own. v2: - Use assert to check whether hmm pfns are valid (Matthew Auld) - Take into account that large pages may cross range boundaries (Matthew Auld) v3: - Don't unnecessarily check for a non-freed sg-table. (Matthew Auld) - Add a missing upread() in an error path. (Matthew Auld) (cherry picked from commit ea3e66d280ce2576664a862693d1da8fd324c317)
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-azure-6.11-cloud-tools-6.11.0-1018", "binary_version": "6.11.0-1018.18~24.04.1" }, { "binary_name": "linux-azure-6.11-headers-6.11.0-1018", "binary_version": "6.11.0-1018.18~24.04.1" }, { "binary_name": "linux-azure-6.11-tools-6.11.0-1018", "binary_version": "6.11.0-1018.18~24.04.1" }, { "binary_name": "linux-buildinfo-6.11.0-1018-azure", "binary_version": "6.11.0-1018.18~24.04.1" }, { "binary_name": "linux-cloud-tools-6.11.0-1018-azure", "binary_version": "6.11.0-1018.18~24.04.1" }, { "binary_name": "linux-headers-6.11.0-1018-azure", "binary_version": "6.11.0-1018.18~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-1018-azure", "binary_version": "6.11.0-1018.18~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-1018-azure-dbgsym", "binary_version": "6.11.0-1018.18~24.04.1" }, { "binary_name": "linux-modules-6.11.0-1018-azure", "binary_version": "6.11.0-1018.18~24.04.1" }, { "binary_name": "linux-modules-extra-6.11.0-1018-azure", "binary_version": "6.11.0-1018.18~24.04.1" }, { "binary_name": "linux-modules-iwlwifi-6.11.0-1018-azure", "binary_version": "6.11.0-1018.18~24.04.1" }, { "binary_name": "linux-tools-6.11.0-1018-azure", "binary_version": "6.11.0-1018.18~24.04.1" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.11.0-1016-gcp", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-buildinfo-6.11.0-1016-gcp-64k", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-gcp-6.11-headers-6.11.0-1016", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-gcp-6.11-lib-rust-6.11.0-1016-gcp", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-gcp-6.11-tools-6.11.0-1016", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-headers-6.11.0-1016-gcp", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-headers-6.11.0-1016-gcp-64k", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-1016-gcp", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-1016-gcp-64k", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-1016-gcp-64k-dbgsym", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-1016-gcp-dbgsym", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-modules-6.11.0-1016-gcp", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-modules-6.11.0-1016-gcp-64k", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-modules-extra-6.11.0-1016-gcp", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-modules-extra-6.11.0-1016-gcp-64k", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-tools-6.11.0-1016-gcp", "binary_version": "6.11.0-1016.16~24.04.1" }, { "binary_name": "linux-tools-6.11.0-1016-gcp-64k", "binary_version": "6.11.0-1016.16~24.04.1" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.11.0-28-generic", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-buildinfo-6.11.0-28-generic-64k", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-cloud-tools-6.11.0-28-generic", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-headers-6.11.0-28-generic", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-headers-6.11.0-28-generic-64k", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-hwe-6.11-cloud-tools-6.11.0-28", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-hwe-6.11-headers-6.11.0-28", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-hwe-6.11-lib-rust-6.11.0-28-generic", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-hwe-6.11-tools-6.11.0-28", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-image-6.11.0-28-generic", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-image-6.11.0-28-generic-dbgsym", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-28-generic", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-28-generic-64k", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-28-generic-64k-dbgsym", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-28-generic-dbgsym", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-modules-6.11.0-28-generic", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-modules-6.11.0-28-generic-64k", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-modules-extra-6.11.0-28-generic", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-modules-ipu6-6.11.0-28-generic", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-modules-ipu7-6.11.0-28-generic", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-modules-iwlwifi-6.11.0-28-generic", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-modules-usbio-6.11.0-28-generic", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-modules-vision-6.11.0-28-generic", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-tools-6.11.0-28-generic", "binary_version": "6.11.0-28.28~24.04.1" }, { "binary_name": "linux-tools-6.11.0-28-generic-64k", "binary_version": "6.11.0-28.28~24.04.1" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.11.0-1015-lowlatency", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-buildinfo-6.11.0-1015-lowlatency-64k", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-cloud-tools-6.11.0-1015-lowlatency", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-headers-6.11.0-1015-lowlatency", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-headers-6.11.0-1015-lowlatency-64k", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-image-unsigned-6.11.0-1015-lowlatency", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-image-unsigned-6.11.0-1015-lowlatency-64k", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-image-unsigned-6.11.0-1015-lowlatency-64k-dbgsym", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-image-unsigned-6.11.0-1015-lowlatency-dbgsym", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-lowlatency-hwe-6.11-cloud-tools-6.11.0-1015", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-lowlatency-hwe-6.11-headers-6.11.0-1015", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-lowlatency-hwe-6.11-lib-rust-6.11.0-1015-lowlatency", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-lowlatency-hwe-6.11-tools-6.11.0-1015", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-modules-6.11.0-1015-lowlatency", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-modules-6.11.0-1015-lowlatency-64k", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-modules-iwlwifi-6.11.0-1015-lowlatency", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-tools-6.11.0-1015-lowlatency", "binary_version": "6.11.0-1015.16~24.04.2" }, { "binary_name": "linux-tools-6.11.0-1015-lowlatency-64k", "binary_version": "6.11.0-1015.16~24.04.2" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.11.0-1024-oem", "binary_version": "6.11.0-1024.24" }, { "binary_name": "linux-headers-6.11.0-1024-oem", "binary_version": "6.11.0-1024.24" }, { "binary_name": "linux-image-unsigned-6.11.0-1024-oem", "binary_version": "6.11.0-1024.24" }, { "binary_name": "linux-image-unsigned-6.11.0-1024-oem-dbgsym", "binary_version": "6.11.0-1024.24" }, { "binary_name": "linux-modules-6.11.0-1024-oem", "binary_version": "6.11.0-1024.24" }, { "binary_name": "linux-modules-ipu6-6.11.0-1024-oem", "binary_version": "6.11.0-1024.24" }, { "binary_name": "linux-modules-ipu7-6.11.0-1024-oem", "binary_version": "6.11.0-1024.24" }, { "binary_name": "linux-modules-iwlwifi-6.11.0-1024-oem", "binary_version": "6.11.0-1024.24" }, { "binary_name": "linux-modules-usbio-6.11.0-1024-oem", "binary_version": "6.11.0-1024.24" }, { "binary_name": "linux-modules-vision-6.11.0-1024-oem", "binary_version": "6.11.0-1024.24" }, { "binary_name": "linux-oem-6.11-headers-6.11.0-1024", "binary_version": "6.11.0-1024.24" }, { "binary_name": "linux-oem-6.11-tools-6.11.0-1024", "binary_version": "6.11.0-1024.24" }, { "binary_name": "linux-tools-6.11.0-1024-oem", "binary_version": "6.11.0-1024.24" } ] }