mbox series

[SRU,Bionic/Focal/OEM-5.10/OEM-5.14/HWE-5.11/Impish,0/1] CVE-2022-0330

Message ID 20220126165845.22813-1-cascardo@canonical.com
Headers show
Series CVE-2022-0330 | expand

Message

Thadeu Lima de Souza Cascardo Jan. 26, 2022, 4:58 p.m. UTC 
[Impact]
A missing GPU TLB flush on i915 may allow userspace to have access to
random memory pages.

[Backport]
Backports for upstream stable series have been provided by author and
adjusted for the respective Ubuntu kernels.

[Potential regression]
i915 users would be impacted.

Tvrtko Ursulin (1):
  drm/i915: Flush TLBs before releasing backing store

 drivers/gpu/drm/i915/i915_drv.h        |  2 +
 drivers/gpu/drm/i915/i915_gem.c        | 84 +++++++++++++++++++++++++-
 drivers/gpu/drm/i915/i915_gem_object.h |  1 +
 drivers/gpu/drm/i915/i915_reg.h        |  6 ++
 drivers/gpu/drm/i915/i915_vma.c        |  4 ++
 5 files changed, 96 insertions(+), 1 deletion(-)

Comments

Stefan Bader Jan. 27, 2022, 9:17 a.m. UTC | #1 
On 26.01.22 17:58, Thadeu Lima de Souza Cascardo wrote:
> [Impact]
> A missing GPU TLB flush on i915 may allow userspace to have access to
> random memory pages.
> 
> [Backport]
> Backports for upstream stable series have been provided by author and
> adjusted for the respective Ubuntu kernels.
> 
> [Potential regression]
> i915 users would be impacted.
> 
> Tvrtko Ursulin (1):
>    drm/i915: Flush TLBs before releasing backing store
> 
>   drivers/gpu/drm/i915/i915_drv.h        |  2 +
>   drivers/gpu/drm/i915/i915_gem.c        | 84 +++++++++++++++++++++++++-
>   drivers/gpu/drm/i915/i915_gem_object.h |  1 +
>   drivers/gpu/drm/i915/i915_reg.h        |  6 ++
>   drivers/gpu/drm/i915/i915_vma.c        |  4 ++
>   5 files changed, 96 insertions(+), 1 deletion(-)
> 

Acked-by: Stefan Bader <stefan.bader@canonical.com>
Tim Gardner Jan. 27, 2022, 1:13 p.m. UTC | #2 
Acked-by: Tim Gardner <tim.gardner@canonical.com>

On 1/26/22 9:58 AM, Thadeu Lima de Souza Cascardo wrote:
> [Impact]
> A missing GPU TLB flush on i915 may allow userspace to have access to
> random memory pages.
> 
> [Backport]
> Backports for upstream stable series have been provided by author and
> adjusted for the respective Ubuntu kernels.
> 
> [Potential regression]
> i915 users would be impacted.
> 
> Tvrtko Ursulin (1):
>    drm/i915: Flush TLBs before releasing backing store
> 
>   drivers/gpu/drm/i915/i915_drv.h        |  2 +
>   drivers/gpu/drm/i915/i915_gem.c        | 84 +++++++++++++++++++++++++-
>   drivers/gpu/drm/i915/i915_gem_object.h |  1 +
>   drivers/gpu/drm/i915/i915_reg.h        |  6 ++
>   drivers/gpu/drm/i915/i915_vma.c        |  4 ++
>   5 files changed, 96 insertions(+), 1 deletion(-)
>
Timo Aaltonen Jan. 31, 2022, 1:11 p.m. UTC | #3 
On 26.1.2022 18.58, Thadeu Lima de Souza Cascardo wrote:
> [Impact]
> A missing GPU TLB flush on i915 may allow userspace to have access to
> random memory pages.
> 
> [Backport]
> Backports for upstream stable series have been provided by author and
> adjusted for the respective Ubuntu kernels.
> 
> [Potential regression]
> i915 users would be impacted.
> 
> Tvrtko Ursulin (1):
>    drm/i915: Flush TLBs before releasing backing store
> 
>   drivers/gpu/drm/i915/i915_drv.h        |  2 +
>   drivers/gpu/drm/i915/i915_gem.c        | 84 +++++++++++++++++++++++++-
>   drivers/gpu/drm/i915/i915_gem_object.h |  1 +
>   drivers/gpu/drm/i915/i915_reg.h        |  6 ++
>   drivers/gpu/drm/i915/i915_vma.c        |  4 ++
>   5 files changed, 96 insertions(+), 1 deletion(-)
> 

applied to oem-5.14, thanks