]> git.ipfire.org Git - thirdparty/kernel/linux.git/commitdiff
coco/tdx-host: Lock out module updates when reading version
authorDave Hansen <dave.hansen@linux.intel.com>
Fri, 22 May 2026 15:56:29 +0000 (08:56 -0700)
committerDave Hansen <dave.hansen@linux.intel.com>
Wed, 3 Jun 2026 15:59:44 +0000 (08:59 -0700)
The TDX module version is currently stashed in some global variables
and dumped out to sysfs without locking. This works fine when the
version is static and never changes.

But with runtime module updates, the TDX module version can change.
Some kind of locking is needed. Barring this, userspace could
theoretically see a strange torn module version that is some
Frankenstein version from from two different updates.

Use the new module update lock/unlock to prevent updates while
trying to read the version.

Don't be fussy about it. There's no need to snapshot the version or do
READ_ONCE(), or minimize lock holding times. sysfs_emit() does not
sleep. Also note that the lock/unlock are backed by
preempt_dis/enable() which are really cheap CPU-local operations.
This is not a heavyweight lock.

Signed-off-by: Dave Hansen <dave.hansen@linux.intel.com>
drivers/virt/coco/tdx-host/tdx-host.c

index e5a672be6200ce27c2c26e1bf9fbf06f70f7829a..d48952968e86c25088b528873b1346a8f109ad7d 100644 (file)
@@ -26,15 +26,24 @@ static ssize_t version_show(struct device *dev, struct device_attribute *attr,
 {
        const struct tdx_sys_info *tdx_sysinfo = tdx_get_sysinfo();
        const struct tdx_sys_info_version *ver;
+       int ret;
 
        if (!tdx_sysinfo)
                return -ENXIO;
 
+       /*
+        * The version number can change during an update.
+        * Lock out updates while printing the version.
+        */
+       seamldr_lock_module_update();
+
        ver = &tdx_sysinfo->version;
+       ret = sysfs_emit(buf, TDX_VERSION_FMT "\n", ver->major_version,
+                                                   ver->minor_version,
+                                                   ver->update_version);
+       seamldr_unlock_module_update();
 
-       return sysfs_emit(buf, TDX_VERSION_FMT "\n", ver->major_version,
-                                                    ver->minor_version,
-                                                    ver->update_version);
+       return ret;
 }
 static DEVICE_ATTR_RO(version);