Commit a11882b6 authored by Juergen Gross's avatar Juergen Gross Committed by Yongqiang Liu
Browse files

x86: Clear .brk area at early boot

stable inclusion
from stable-4.19.253
commit 36e2f161fb01795722f2ff1a24d95f08100333dd
category: bugfix
bugzilla: https://gitee.com/src-openeuler/kernel/issues/I5JTYM


CVE: CVE-2022-36123

--------------------------------

[ Upstream commit 38fa5479 ]

The .brk section has the same properties as .bss: it is an alloc-only
section and should be cleared before being used.

Not doing so is especially a problem for Xen PV guests, as the
hypervisor will validate page tables (check for writable page tables
and hypervisor private bits) before accepting them to be used.

Make sure .brk is initially zero by letting clear_bss() clear the brk
area, too.

Signed-off-by: default avatarJuergen Gross <jgross@suse.com>
Signed-off-by: default avatarBorislav Petkov <bp@suse.de>
Link: https://lore.kernel.org/r/20220630071441.28576-3-jgross@suse.com


Signed-off-by: default avatarSasha Levin <sashal@kernel.org>
Signed-off-by: default avatarGONG, Ruiqi <gongruiqi1@huawei.com>
Reviewed-by: default avatarXiu Jianfeng <xiujianfeng@huawei.com>
Signed-off-by: default avatarYongqiang Liu <liuyongqiang13@huawei.com>
parent b9fe1379
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment