diff options
author | Paul Mackerras <paulus@ozlabs.org> | 2020-05-28 10:56:42 +1000 |
---|---|---|
committer | Paul Mackerras <paulus@ozlabs.org> | 2020-05-28 10:56:42 +1000 |
commit | 11362b1befeadaae4d159a8cddcdaf6b8afe08f9 (patch) | |
tree | 31e28225720a47331b4f3544cbc110fe29a448bd /arch/powerpc/sysdev/i8259.c | |
parent | 3d89c2ef24f0772b7806ed289bef482b24083de6 (diff) | |
download | linux-11362b1befeadaae4d159a8cddcdaf6b8afe08f9.tar.gz linux-11362b1befeadaae4d159a8cddcdaf6b8afe08f9.tar.bz2 linux-11362b1befeadaae4d159a8cddcdaf6b8afe08f9.zip |
KVM: PPC: Book3S HV: Close race with page faults around memslot flushes
There is a potential race condition between hypervisor page faults
and flushing a memslot. It is possible for a page fault to read the
memslot before a memslot is updated and then write a PTE to the
partition-scoped page tables after kvmppc_radix_flush_memslot has
completed. (Note that this race has never been explicitly observed.)
To close this race, it is sufficient to increment the MMU sequence
number while the kvm->mmu_lock is held. That will cause
mmu_notifier_retry() to return true, and the page fault will then
return to the guest without inserting a PTE.
Signed-off-by: Paul Mackerras <paulus@ozlabs.org>
Diffstat (limited to 'arch/powerpc/sysdev/i8259.c')
0 files changed, 0 insertions, 0 deletions