VT-d: fix reduced page table levels support when sharing tables
authorJan Beulich <jbeulich@suse.com>
Fri, 19 Nov 2021 14:14:08 +0000 (15:14 +0100)
committerJan Beulich <jbeulich@suse.com>
Fri, 19 Nov 2021 14:14:08 +0000 (15:14 +0100)
commit02b46377b69feb6dd3649f037e17684af9fb7853
treec5ede8a6128bcb96a4fc154a11609814c1be5130
parent1cffc48f1e1f972daeec579c62de4bb24f3152fa
VT-d: fix reduced page table levels support when sharing tables

domain_pgd_maddr() contains logic to adjust the root address to be put
in the context entry in case 4-level page tables aren't supported by an
IOMMU. This logic may not be bypassed when sharing page tables.

This is CVE-2021-28710 / XSA-390.

Fixes: 25ccd093425c ("iommu: remove the share_p2m operation")
Signed-off-by: Jan Beulich <jbeulich@suse.com>
Reviewed-by: Kevin Tian <kevin.tian@intel.com>
Release-Acked-by: Ian Jackson <iwj@xenproject.org>
xen/drivers/passthrough/vtd/iommu.c