x86/fpu/xstate: Fix PKRU covert channel
When XCR0[9] is set, PKRU can be read and written from userspace with XSAVE and XRSTOR, even when CR4.PKE is clear. Clear XCR0[9] when protection keys are disabled. Reported-by:Tavis Ormandy <taviso@google.com> Signed-off-by:
Jim Mattson <jmattson@google.com> Signed-off-by:
Ingo Molnar <mingo@kernel.org> Acked-by:
Dave Hansen <dave.hansen@linux.intel.com> Link: https://lore.kernel.org/r/20230831043228.1194256-1-jmattson@google.com
parent
d87e89c2
Please register or sign in to comment