diff options
| author | Juergen Gross <jgross@suse.com> | 2022-02-25 18:05:42 +0300 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2022-03-11 14:22:36 +0300 |
| commit | f1c85942314dfc400e8526148eee7e8535f995fa (patch) | |
| tree | 0f0578d4062c2c2c44f953f897686da4e5c559dd /drivers/xen | |
| parent | 5d5fa1d53a31c799b85112841c3c639c7baac1c4 (diff) | |
| download | linux-f1c85942314dfc400e8526148eee7e8535f995fa.tar.xz | |
xen/scsifront: don't use gnttab_query_foreign_access() for mapped status
Commit 33172ab50a53578a95691310f49567c9266968b0 upstream.
It isn't enough to check whether a grant is still being in use by
calling gnttab_query_foreign_access(), as a mapping could be realized
by the other side just after having called that function.
In case the call was done in preparation of revoking a grant it is
better to do so via gnttab_try_end_foreign_access() and check the
success of that operation instead.
This is CVE-2022-23038 / part of XSA-396.
Reported-by: Demi Marie Obenour <demi@invisiblethingslab.com>
Signed-off-by: Juergen Gross <jgross@suse.com>
Reviewed-by: Jan Beulich <jbeulich@suse.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/xen')
0 files changed, 0 insertions, 0 deletions