]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
projects / thirdparty / kernel / stable.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 73116df) | patch
aio: fix spectre gadget in lookup_ioctx
authorJeff Moyer <jmoyer@redhat.com>
Tue, 11 Dec 2018 17:37:49 +0000 (12:37 -0500)
committerAl Viro <viro@zeniv.linux.org.uk>
Tue, 11 Dec 2018 19:32:14 +0000 (14:32 -0500)
commit0afa99648350dbd6d08ee3efd2376db240a6c458
tree0700011140ed21d2636f3ee0e665d0529e88befbtree | snapshot
parent73116df7bb90435ccb2817f44113295240d15034commit | diff
aio: fix spectre gadget in lookup_ioctx

Matthew pointed out that the ioctx_table is susceptible to spectre v1,
because the index can be controlled by an attacker.  The below patch
should mitigate the attack for all of the aio system calls.

Reported-by: Matthew Wilcox <willy@infradead.org>
Signed-off-by: Jeff Moyer <jmoyer@redhat.com>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
fs/aio.c diff | blob | blame | history
Mirror https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git