Craig Bergstrom ce56a86e2a x86/mm: Limit mmap() of /dev/mem to valid physical addresses ...

Currently, it is possible to mmap() any offset from /dev/mem.  If a
program mmaps() /dev/mem offsets outside of the addressable limits
of a system, the page table can be corrupted by setting reserved bits.

For example if you mmap() offset 0x0001000000000000 of /dev/mem on an
x86_64 system with a 48-bit bus, the page fault handler will be called
with error_code set to RSVD.  The kernel then crashes with a page table
corruption error.

This change prevents this page table corruption on x86 by refusing
to mmap offsets higher than the highest valid address in the system.

Signed-off-by: Craig Bergstrom <craigb@google.com>
Cc: Andrew Morton <akpm@linux-foundation.org>
Cc: Andy Lutomirski <luto@kernel.org>
Cc: Borislav Petkov <bp@alien8.de>
Cc: Brian Gerst <brgerst@gmail.com>
Cc: Denys Vlasenko <dvlasenk@redhat.com>
Cc: H. Peter Anvin <hpa@zytor.com>
Cc: Josh Poimboeuf <jpoimboe@redhat.com>
Cc: Linus Torvalds <torvalds@linux-foundation.org>
Cc: Luis R. Rodriguez <mcgrof@suse.com>
Cc: Peter Zijlstra <peterz@infradead.org>
Cc: Thomas Gleixner <tglx@linutronix.de>
Cc: Toshi Kani <toshi.kani@hp.com>
Cc: dsafonov@virtuozzo.com
Cc: kirill.shutemov@linux.intel.com
Cc: mhocko@suse.com
Cc: oleg@redhat.com
Link: http://lkml.kernel.org/r/20171019192856.39672-1-craigb@google.com
Signed-off-by: Ingo Molnar <mingo@kernel.org>

2017-10-20 09:48:00 +02:00

..

kmemcheck

x86/mm: Audit and remove any unnecessary uses of module.h

2016-07-14 13:04:20 +02:00

amdtopology.c

x86/boot/e820: Move asm/e820.h to asm/e820/api.h

2017-01-28 09:31:13 +01:00

debug_pagetables.c

x86/mm/ptdump: Make (debugfs)/kernel_page_tables read-only

2015-12-04 12:55:01 +01:00

dump_pagetables.c

x86/mm/dump_pagetables: Speed up page tables dump for CONFIG_KASAN=y

2017-07-25 11:22:09 +02:00

extable.c

x86/fpu: Reinitialize FPU registers if restoring FPU state fails

2017-09-25 09:26:38 +02:00

fault.c

x86/mm: Fix fault error path using unsafe vma pointer

2017-09-25 09:36:15 +02:00

highmem_32.c

x86/mm: Audit and remove any unnecessary uses of module.h

2016-07-14 13:04:20 +02:00

hugetlbpage.c

x86/mm: Prepare to expose larger address space to userspace

2017-07-21 10:05:18 +02:00

ident_map.c

x86/mm, kexec: Allow kexec to be used with SME

2017-07-18 11:38:04 +02:00

init_32.c

mm, memory_hotplug: replace for_device by want_memblock in arch_add_memory

2017-07-06 16:24:32 -07:00

init_64.c

mm/memory_hotplug: introduce add_pages

2017-09-08 18:26:46 -07:00

init.c

x86/mm/64: Initialize CR4.PCIDE early

2017-09-13 09:54:43 +02:00

iomap_32.c

x86/mm: Audit and remove any unnecessary uses of module.h

2016-07-14 13:04:20 +02:00

ioremap.c

x86/mm: Use proper encryption attributes with /dev/mem

2017-07-18 11:38:05 +02:00

kasan_init_64.c

x86/mm: Insure that boot memory areas are mapped properly

2017-07-18 11:38:01 +02:00

kaslr.c

x86/mm: Add support for 5-level paging for KASLR

2017-06-13 08:56:58 +02:00

kmmio.c

x86/mm: Audit and remove any unnecessary uses of module.h

2016-07-14 13:04:20 +02:00

Makefile

x86/mm: Disable various instrumentations of mm/mem_encrypt.c and mm/tlb.c

2017-10-11 17:22:59 +02:00

mem_encrypt_boot.S

x86/mm: Fix SME encryption stack ptr handling

2017-08-29 10:57:16 +02:00

mem_encrypt.c

x86/mm: Disable branch profiling in mem_encrypt.c

2017-09-29 19:37:51 +02:00

mm_internal.h

x86: Enable PAT to use cache mode translation tables

2014-11-16 11:04:26 +01:00

mmap.c

x86/mm: Limit mmap() of /dev/mem to valid physical addresses

2017-10-20 09:48:00 +02:00

mmio-mod.c

x86/boot/e820: Move asm/e820.h to asm/e820/api.h

2017-01-28 09:31:13 +01:00

mpx.c

x86/mpx: Do not allow MPX if we have mappings above 47-bit

2017-07-21 10:05:18 +02:00

numa_32.c

x86/mm/32: Set the '__vmalloc_start_set' flag in initmem_init()

2017-05-09 08:12:27 +02:00

numa_64.c

x86, mm: kill numa_free_all_bootmem()

2012-11-17 11:59:47 -08:00

numa_emulation.c

x86/numa_emulation: Recalculate numa_nodes_parsed from emulated nodes

2017-07-18 11:16:49 +02:00

numa_internal.h

x86-32, mm: Rip out x86_32 NUMA remapping code

2013-01-31 14:12:30 -08:00

numa.c

Merge branch 'x86/boot' into x86/mm, to avoid conflict

2017-04-11 08:56:05 +02:00

pageattr-test.c

x86/mm/pat: Make mm/pageattr[-test].c explicitly non-modular

2015-08-25 09:48:38 +02:00

pageattr.c

x86, drm, fbdev: Do not specify encrypted memory for video mappings

2017-07-18 11:38:04 +02:00

pat_internal.h

x86/mm/pat: Convert to pr_*() usage

2015-05-27 14:40:59 +02:00

pat_rbtree.c

x86/mm/pat: Use rb_entry()

2017-02-04 17:18:00 +01:00

pat.c

x86/mm: Use proper encryption attributes with /dev/mem

2017-07-18 11:38:05 +02:00

pf_in.c

x86/mm: Audit and remove any unnecessary uses of module.h

2016-07-14 13:04:20 +02:00

pf_in.h

x86 mmiotrace: move files into arch/x86/mm/.

2008-05-24 11:25:37 +02:00

pgtable_32.c

Merge branch 'x86/boot' into x86/mm, to avoid conflict

2017-04-11 08:56:05 +02:00

pgtable.c

x86/paravirt: Remove no longer used paravirt functions

2017-09-13 10:55:15 +02:00

physaddr.c

x86/mm: Audit and remove any unnecessary uses of module.h

2016-07-14 13:04:20 +02:00

physaddr.h

x86: split __phys_addr out into separate file

2009-09-10 11:48:55 -07:00

pkeys.c

x86/fpu: Rename fpu::fpstate_active to fpu::initialized

2017-09-26 09:43:36 +02:00

setup_nx.c

Revert "x86/mm/32: Set NX in __supported_pte_mask before enabling paging"

2016-04-26 19:52:57 +02:00

srat.c

x86/boot/e820: Move asm/e820.h to asm/e820/api.h

2017-01-28 09:31:13 +01:00

testmmiotrace.c

Annotate hardware config module parameters in arch/x86/mm/

2017-04-04 16:54:21 +01:00

tlb.c

x86/mm: Remove debug/x86/tlb_defer_switch_to_init_mm

2017-10-18 15:25:02 +02:00