Sebastian Ene fc3139d9f4 KVM: arm64: Check the untrusted offset in FF-A memory share ...

commit 103e17aac09cdd358133f9e00998b75d6c1f1518 upstream.

Verify the offset to prevent OOB access in the hypervisor
FF-A buffer in case an untrusted large enough value
[U32_MAX - sizeof(struct ffa_composite_mem_region) + 1, U32_MAX]
is set from the host kernel.

Signed-off-by: Sebastian Ene <sebastianene@google.com>
Acked-by: Will Deacon <will@kernel.org>
Link: https://patch.msgid.link/20251017075710.2605118-1-sebastianene@google.com
Signed-off-by: Marc Zyngier <maz@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2025-12-01 11:41:52 +01:00

..

alpha

arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c

2025-11-02 22:14:41 +09:00

arc

arc: Fix __fls() const-foldability via __builtin_clzl()

2025-11-24 10:29:18 +01:00

arm

ARM: dts: BCM53573: Fix address of Luxul XAP-1440's Ethernet PHY

2025-11-24 10:30:06 +01:00

arm64

KVM: arm64: Check the untrusted offset in FF-A memory share

2025-12-01 11:41:52 +01:00

csky

arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c

2025-11-02 22:14:41 +09:00

hexagon

arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c

2025-11-02 22:14:41 +09:00

ia64

vgacon: rework screen_info #ifdef checks

2024-06-27 13:49:15 +02:00

loongarch

LoongArch: Use UAPI types in ptrace UAPI header

2025-12-01 11:41:48 +01:00

m68k

arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c

2025-11-02 22:14:41 +09:00

microblaze

arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c

2025-11-02 22:14:41 +09:00

mips

MIPS: Malta: Fix !EVA SOC-it PCI MMIO

2025-12-01 11:41:43 +01:00

nios2

arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c

2025-11-02 22:14:41 +09:00

openrisc

arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c

2025-11-02 22:14:41 +09:00

parisc

arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c

2025-11-02 22:14:41 +09:00

powerpc

powerpc/eeh: Use result of error_detected() in uevent

2025-11-24 10:29:27 +01:00

riscv

riscv: acpi: avoid errors caused by probing DT devices when ACPI is used

2025-11-24 10:29:57 +01:00

s390

s390/mm: Fix __ptep_rdp() inline assembly

2025-12-01 11:41:50 +01:00

sh

arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c

2025-11-02 22:14:41 +09:00

sparc

sparc64: fix prototypes of reads[bwl]()

2025-11-24 10:29:42 +01:00

um

um: Fix help message for ssl-non-raw

2025-11-24 10:29:47 +01:00

x86

x86/microcode/AMD: Limit Entrysign signature checking to known generations

2025-12-01 11:41:49 +01:00

xtensa

arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c

2025-11-02 22:14:41 +09:00

.gitignore

…

Kconfig

Revert "mm: mmap: allow for the maximum number of bits for randomizing mmap_base by default"

2024-06-27 13:49:15 +02:00