Commit 30021a38 authored by Juergen Gross's avatar Juergen Gross Committed by Yang Yingliang
Browse files

xen/events: fix race in evtchn_fifo_unmask()



mainline inclusion
from mainline-v5.10
commit f0133719
category: bugfix
bugzilla: NA
CVE: CVE-2020-27673

--------------------------------

Unmasking a fifo event channel can result in unmasking it twice, once
directly in the kernel and once via a hypercall in case the event was
pending.

Fix that by doing the local unmask only if the event is not pending.

This is part of XSA-332.

Cc: stable@vger.kernel.org
Signed-off-by: default avatarJuergen Gross <jgross@suse.com>
Reviewed-by: default avatarJan Beulich <jbeulich@suse.com>
Signed-off-by: default avatarYang Yingliang <yangyingliang@huawei.com>
Reviewed-by: default avatarJason Yan <yanaijie@huawei.com>
Signed-off-by: default avatarYang Yingliang <yangyingliang@huawei.com>
parent ef3ab2af
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment