mbox series

[PATCH-for-9.0,0/4] hw/virtio: Protect from more DMA re-entrancy bugs

Message ID 20240404191339.5688-1-philmd@linaro.org
Headers show
Series hw/virtio: Protect from more DMA re-entrancy bugs | expand

Message

Philippe Mathieu-Daudé April 4, 2024, 7:13 p.m. UTC 
Gerd suggested to use the transport guard to protect the
device from DMA re-entrancy abuses.

Philippe Mathieu-Daudé (4):
  hw/virtio: Introduce virtio_bh_new_guarded() helper
  hw/display/virtio-gpu: Protect from DMA re-entrancy bugs
  hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs
  hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs

 include/hw/virtio/virtio.h  |  7 +++++++
 hw/char/virtio-serial-bus.c |  3 +--
 hw/display/virtio-gpu.c     |  6 ++----
 hw/virtio/virtio-crypto.c   |  4 ++--
 hw/virtio/virtio.c          | 10 ++++++++++
 5 files changed, 22 insertions(+), 8 deletions(-)

Comments

Gerd Hoffmann April 5, 2024, 7:02 a.m. UTC | #1 
On Thu, Apr 04, 2024 at 09:13:35PM +0200, Philippe Mathieu-Daudé wrote:
> Gerd suggested to use the transport guard to protect the
> device from DMA re-entrancy abuses.

Thanks for turning that idea into a proper patch series.

Series:
Reviewed-by: Gerd Hoffmann <kraxel@redhat.com>

take care,
  Gerd
Mauro Matteo Cascella April 8, 2024, 7:37 a.m. UTC | #2 
Hi,

On Thu, Apr 4, 2024 at 9:13 PM Philippe Mathieu-Daudé <philmd@linaro.org> wrote:
>
> Gerd suggested to use the transport guard to protect the
> device from DMA re-entrancy abuses.

This was assigned CVE-2024-3446.

> Philippe Mathieu-Daudé (4):
>   hw/virtio: Introduce virtio_bh_new_guarded() helper
>   hw/display/virtio-gpu: Protect from DMA re-entrancy bugs
>   hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs
>   hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs
>
>  include/hw/virtio/virtio.h  |  7 +++++++
>  hw/char/virtio-serial-bus.c |  3 +--
>  hw/display/virtio-gpu.c     |  6 ++----
>  hw/virtio/virtio-crypto.c   |  4 ++--
>  hw/virtio/virtio.c          | 10 ++++++++++
>  5 files changed, 22 insertions(+), 8 deletions(-)
>
> --
> 2.41.0
>

Thanks,
--
Mauro Matteo Cascella
Red Hat Product Security
PGP-Key ID: BB3410B0