Anjali K e59822f9d7 powerpc/pseries: Whitelist dtl slub object for copying to userspace ... [ Upstream commit 1a14150e1656f7a332a943154fc486504db4d586 ] Reading the dispatch trace log from /sys/kernel/debug/powerpc/dtl/cpu-* results in a BUG() when the config CONFIG_HARDENED_USERCOPY is enabled as shown below. kernel BUG at mm/usercopy.c:102! Oops: Exception in kernel mode, sig: 5 [#1] LE PAGE_SIZE=64K MMU=Radix SMP NR_CPUS=2048 NUMA pSeries Modules linked in: xfs libcrc32c dm_service_time sd_mod t10_pi sg ibmvfc scsi_transport_fc ibmveth pseries_wdt dm_multipath dm_mirror dm_region_hash dm_log dm_mod fuse CPU: 27 PID: 1815 Comm: python3 Not tainted 6.10.0-rc3 #85 Hardware name: IBM,9040-MRX POWER10 (raw) 0x800200 0xf000006 of:IBM,FW1060.00 (NM1060_042) hv:phyp pSeries NIP: c0000000005d23d4 LR: c0000000005d23d0 CTR: 00000000006ee6f8 REGS: c000000120c078c0 TRAP: 0700 Not tainted (6.10.0-rc3) MSR: 8000000000029033 <SF,EE,ME,IR,DR,RI,LE> CR: 2828220f XER: 0000000e CFAR: c0000000001fdc80 IRQMASK: 0 [ ... GPRs omitted ... ] NIP [c0000000005d23d4] usercopy_abort+0x78/0xb0 LR [c0000000005d23d0] usercopy_abort+0x74/0xb0 Call Trace: usercopy_abort+0x74/0xb0 (unreliable) __check_heap_object+0xf8/0x120 check_heap_object+0x218/0x240 __check_object_size+0x84/0x1a4 dtl_file_read+0x17c/0x2c4 full_proxy_read+0x8c/0x110 vfs_read+0xdc/0x3a0 ksys_read+0x84/0x144 system_call_exception+0x124/0x330 system_call_vectored_common+0x15c/0x2ec --- interrupt: 3000 at 0x7fff81f3ab34 Commit 6d07d1cd30 ("usercopy: Restrict non-usercopy caches to size 0") requires that only whitelisted areas in slab/slub objects can be copied to userspace when usercopy hardening is enabled using CONFIG_HARDENED_USERCOPY. Dtl contains hypervisor dispatch events which are expected to be read by privileged users. Hence mark this safe for user access. Specify useroffset=0 and usersize=DISPATCH_LOG_BYTES to whitelist the entire object. Co-developed-by: Vishal Chourasia <vishalc@linux.ibm.com> Signed-off-by: Vishal Chourasia <vishalc@linux.ibm.com> Signed-off-by: Anjali K <anjalik@linux.ibm.com> Reviewed-by: Srikar Dronamraju <srikar@linux.ibm.com> Signed-off-by: Michael Ellerman <mpe@ellerman.id.au> Link: https://msgid.link/20240614173844.746818-1-anjalik@linux.ibm.com Signed-off-by: Sasha Levin <sashal@kernel.org>		2024-07-27 10:46:13 +02:00
..
4xx	powerpc/4xx/cpm: Fix return value of __setup() handler	2022-06-09 10:23:10 +02:00
8xx	powerpc/8xx: export 'cpm_setbrg' for modules	2022-06-09 10:23:09 +02:00
40x	…
44x	powerpc/44x: select I2C for CURRITUCK	2024-01-25 14:52:32 -08:00
52xx	powerpc/52xx: Fix a resource leak in an error handling path	2022-12-31 13:14:35 +01:00
82xx	powerpc: Bulk conversion to generic_handle_domain_irq()	2021-08-12 11:39:41 +01:00
83xx	powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe()	2022-12-31 13:14:35 +01:00
85xx	powerpc/85xx: Fix oops when CONFIG_FSL_PMC=n	2021-12-22 09:32:45 +01:00
86xx	powerpc: retire sbc8641d board support	2021-08-27 00:48:18 +10:00
512x	powerpc/mpc512x: fix resource printk format warning	2023-05-11 23:00:34 +09:00
amigaone	…
book3s	powerpc/vas: Fix potential NULL pointer dereference	2021-11-18 19:17:19 +01:00
cell	powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address	2022-08-17 14:24:13 +02:00
chrp	…
embedded6xx	powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc.	2024-03-26 18:21:31 -04:00
maple	…
microwatt	powerpc/microwatt: wire up rng during setup_arch()	2022-06-29 09:03:30 +02:00
pasemi	powerpc updates for 5.15	2021-09-03 11:22:50 -07:00
powermac	powerpc/mm: Switch obsolete dssall to .long	2022-06-14 18:36:27 +02:00
powernv	powerpc/powernv/ioda: Skip unallocated resources when mapping to PE	2024-03-01 13:21:51 +01:00
ps3	powerpc updates for 5.15	2021-09-03 11:22:50 -07:00
pseries	powerpc/pseries: Whitelist dtl slub object for copying to userspace	2024-07-27 10:46:13 +02:00
Kconfig	…
Kconfig.cputype	powerpc/32: Don't always pass -mcpu=powerpc to the compiler	2022-08-25 11:40:43 +02:00
Makefile	…
fsl_uli1575.c	…