]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
s390/syscalls: Add spectre boundary for syscall dispatch table
authorGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 24 Mar 2026 16:34:05 +0000 (17:34 +0100)
committerVasily Gorbik <gor@linux.ibm.com>
Fri, 27 Mar 2026 23:43:39 +0000 (00:43 +0100)
commit48b8814e25d073dd84daf990a879a820bad2bcbd
tree7d7e252e0bce901bc143e78a42e8435c7e13e438
parentc5c0a268b38adffbb2e70e6957017537ff54c157
s390/syscalls: Add spectre boundary for syscall dispatch table

The s390 syscall number is directly controlled by userspace, but does
not have an array_index_nospec() boundary to prevent access past the
syscall function pointer tables.

Cc: Heiko Carstens <hca@linux.ibm.com>
Cc: Vasily Gorbik <gor@linux.ibm.com>
Cc: Alexander Gordeev <agordeev@linux.ibm.com>
Cc: Christian Borntraeger <borntraeger@linux.ibm.com>
Cc: Sven Schnelle <svens@linux.ibm.com>
Cc: Arnd Bergmann <arnd@arndb.de>
Fixes: 56e62a737028 ("s390: convert to generic entry")
Cc: stable@kernel.org
Assisted-by: gkh_clanker_2000
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Reviewed-by: Vasily Gorbik <gor@linux.ibm.com>
Link: https://lore.kernel.org/r/2026032404-sterling-swoosh-43e6@gregkh
Signed-off-by: Vasily Gorbik <gor@linux.ibm.com>
arch/s390/kernel/syscall.c