diff options
| author | Gustavo A. R. Silva | 2019-07-31 19:54:28 +0200 |
|---|---|---|
| committer | Doug Ledford | 2019-08-01 18:14:15 +0200 |
| commit | 6497d0a9c53df6e98b25e2b79f2295d7caa47b6e (patch) | |
| tree | fea447494129d074937be360a78b0cfcedaa1eea /lib/clz_tab.c | |
| parent | IB/mad: Fix use-after-free in ib mad completion handling (diff) | |
| download | kernel-qcow2-linux-6497d0a9c53df6e98b25e2b79f2295d7caa47b6e.tar.gz kernel-qcow2-linux-6497d0a9c53df6e98b25e2b79f2295d7caa47b6e.tar.xz kernel-qcow2-linux-6497d0a9c53df6e98b25e2b79f2295d7caa47b6e.zip | |
IB/hfi1: Fix Spectre v1 vulnerability
sl is controlled by user-space, hence leading to a potential
exploitation of the Spectre variant 1 vulnerability.
Fix this by sanitizing sl before using it to index ibp->sl_to_sc.
Notice that given that speculation windows are large, the policy is
to kill the speculation on the first load and not worry if it can be
completed with a dependent load/store [1].
[1] https://lore.kernel.org/lkml/20180423164740.GY17484@dhcp22.suse.cz/
Cc: stable@vger.kernel.org
Signed-off-by: Gustavo A. R. Silva <gustavo@embeddedor.com>
Link: https://lore.kernel.org/r/20190731175428.GA16736@embeddedor
Signed-off-by: Doug Ledford <dledford@redhat.com>
Diffstat (limited to 'lib/clz_tab.c')
0 files changed, 0 insertions, 0 deletions