]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
KVM: arm64: Zero out the stack initialized data in the FFA handler
authorSebastian Ene <sebastianene@google.com>
Thu, 2 Jul 2026 10:38:43 +0000 (10:38 +0000)
committerMarc Zyngier <maz@kernel.org>
Tue, 7 Jul 2026 10:25:50 +0000 (11:25 +0100)
commit2bd3c6c702f3a9e2bcb3b536b0fbbaa645005d71
tree6e25f64a9070db6d60108ac28ee0d5a5734adc91
parent6a7a181f6921db3d9aed1bba7e15547fefd7eedc
KVM: arm64: Zero out the stack initialized data in the FFA handler

Don't leak hypervisor stack data when using the FFA_VERSION call.
When the compiler doesn't support -ftrivial-auto-var-init=zero option
we need to zero out the stack initialized variable before returning data
to the host caller.

Closes:
https://lore.kernel.org/all/20260616160016.C62C81F000E9@smtp.kernel.org/

Reported-by: Sashiko AI <sashiko-bot@kernel.org>
Fixes: c9c012625e12 ("KVM: arm64: Trap FFA_VERSION host call in pKVM")
Reviewed-by: Vincent Donnefort <vdonnefort@google.com>
Link: https://lore.kernel.org/all/20260616160016.C62C81F000E9@smtp.kernel.org/
Signed-off-by: Sebastian Ene <sebastianene@google.com>
Link: https://patch.msgid.link/20260702103848.1647249-7-sebastianene@google.com
Signed-off-by: Marc Zyngier <maz@kernel.org>
arch/arm64/kvm/hyp/nvhe/ffa.c