]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
percpu: Separate decrypted varaibles anytime encryption can be enabled
authorErdem Aktas <erdemaktas@google.com>
Fri, 13 Dec 2019 21:31:46 +0000 (13:31 -0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 11 Feb 2020 12:34:11 +0000 (04:34 -0800)
commita5d0c3ff6553a2aabef438af6f16ad8a9cdd01ac
tree1f074a311e5349062303f406915b5a4fc1491791
parentabc51506fcebee12183f98a30f0aa67b32ee8542
percpu: Separate decrypted varaibles anytime encryption can be enabled

commit 264b0d2bee148073c117e7bbbde5be7125a53be1 upstream.

CONFIG_VIRTUALIZATION may not be enabled for memory encrypted guests.  If
disabled, decrypted per-CPU variables may end up sharing the same page
with variables that should be left encrypted.

Always separate per-CPU variables that should be decrypted into their own
page anytime memory encryption can be enabled in the guest rather than
rely on any other config option that may not be enabled.

Fixes: ac26963a1175 ("percpu: Introduce DEFINE_PER_CPU_DECRYPTED")
Cc: stable@vger.kernel.org # 4.15+
Signed-off-by: Erdem Aktas <erdemaktas@google.com>
Signed-off-by: David Rientjes <rientjes@google.com>
Signed-off-by: Dennis Zhou <dennis@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
include/linux/percpu-defs.h