Skip to content

arm64/acpi: restrict AML opregion memory access

Ard Biesheuvel kernel-hardening linux-acpi linux-arm-kernel linux-arm-msm 3 versions – Applied

Status from this message: Applied to arm64 (for-next/acpi), thanks!

Get series with b4
b4 am [email protected]

Versions newest first · linked by author and title

  1. v3 Latest2 patches 13 repliesApplied
  2. v2 RFC1 patch 5 repliesSuperseded
  3. v1 RFC1 patch 5 repliesSuperseded

Changes in v3 from the cover letter

- split into two patches
- fallback to __ioremap() for ACPI reclaim memory, in case it is not covered by the linear mapping (e.g., when booting a kdump kernel)

Patches in v3 Applied

#Subject and filesSizeRepliesApplied
1/2arm64/acpi: disallow AML memory opregions to access kernel memoryarch/arm64/include/asm/acpi.h arch/arm64/kernel/acpi.c+67 -146 replies
2/2arm64/acpi: disallow writeable AML opregion mapping for EFI code regionsarch/arm64/kernel/acpi.c+9 -04 replies

Reviews trailers per patch

1 of 2 patches has a Reviewed-by or Acked-by of their own; the series has one for all of them.

PatchLorenzo PieralisiJonathan Cameron
SeriesA-b
1/2T-b R-b
2/2

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.

Read the v3 thread

Cover letter [PATCH v3 0/2] arm64/acpi: restrict AML opregion memory access

v2:
- do a more elaborate check on the region, against the EFI memory map

v3:
- split into two patches
- fallback to __ioremap() for ACPI reclaim memory, in case it is not covered by the linear mapping (e.g., when booting a kdump kernel)

Ard Biesheuvel (2):
arm64/acpi: disallow AML memory opregions to access kernel memory arm64/acpi: disallow writeable AML opregion mapping for EFI code
regions

 arch/arm64/include/asm/acpi.h | 15 +---
 arch/arm64/kernel/acpi.c      | 75 ++++++++++++++++++++
 2 files changed, 76 insertions(+), 14 deletions(-)
Signature · 1 line
2.27.0