projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: cf9b366) | patch
x86: Restrict MSR access when the kernel is locked down
authorMatthew Garrett <matthew.garrett@nebula.com>
Wed, 5 Apr 2017 16:40:30 +0000 (17:40 +0100)
committerBen Hutchings <ben@decadent.org.uk>
Tue, 19 Sep 2017 00:59:17 +0000 (01:59 +0100)
commit528ce1ff96ef027d1a0300230a26f72ecb15e7c9
treebb916fed632e319388927a5a4f88f208f4f7de13tree | snapshot
parentcf9b36646878c29c18eda68b0f724e3030fb11e1commit | diff
x86: Restrict MSR access when the kernel is locked down

Writing to MSRs should not be allowed if the kernel is locked down, since
it could lead to execution of arbitrary code in kernel mode.  Based on a
patch by Kees Cook.

Cc: Kees Cook <keescook@chromium.org>
Signed-off-by: Matthew Garrett <matthew.garrett@nebula.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name 0051-x86-Restrict-MSR-access-when-the-kernel-is-locked-do.patch
arch/x86/kernel/msr.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.