lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Fri, 17 Oct 2014 13:35:18 +0100 From: David Vrabel <david.vrabel@...rix.com> To: Juergen Gross <jgross@...e.com>, <linux-kernel@...r.kernel.org>, <xen-devel@...ts.xensource.com>, <konrad.wilk@...cle.com>, <david.vrabel@...rix.com> Subject: Re: [Xen-devel] [PATCH V2] xen: avoid race in p2m handling On 17/10/14 12:16, Juergen Gross wrote: > When a new p2m leaf is allocated this leaf is linked into the p2m tree > via cmpxchg. Unfortunately the compare value for checking the success > of the update is read after checking for the need of a new leaf. It is > possible that a new leaf has been linked into the tree concurrently > in between. This could lead to a leaked memory page and to the loss of > some p2m entries. > > Avoid the race by using the read compare value for checking the need > of a new p2m leaf and use ACCESS_ONCE() to get it. > > There are other places which seem to need ACCESS_ONCE() to ensure > proper operation. Change them accordingly. Applied, thanks. David -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists