]> git.proxmox.com Git - mirror_ubuntu-jammy-kernel.git/commit - drivers/net/xen-netfront.c
xen/netfront: harden netfront against event channel storms
authorJuergen Gross <jgross@suse.com>
Thu, 16 Dec 2021 07:24:08 +0000 (08:24 +0100)
committerAndrea Righi <andrea.righi@canonical.com>
Tue, 4 Jan 2022 08:49:29 +0000 (09:49 +0100)
commit900e0ac2cddd2faadaaa7ae408c2658f87395cf3
treef0a1a71e2eac18c2d711016f8eb6af81ccaed811
parentd1761dfc111aaf61ac62c4dfe89bc5d4eefc5fef
xen/netfront: harden netfront against event channel storms

BugLink: https://bugs.launchpad.net/bugs/1956302
commit b27d47950e481f292c0a5ad57357edb9d95d03ba upstream.

The Xen netfront driver is still vulnerable for an attack via excessive
number of events sent by the backend. Fix that by using lateeoi event
channels.

For being able to detect the case of no rx responses being added while
the carrier is down a new lock is needed in order to update and test
rsp_cons and the number of seen unconsumed responses atomically.

This is part of XSA-391

Signed-off-by: Juergen Gross <jgross@suse.com>
Reviewed-by: Jan Beulich <jbeulich@suse.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Andrea Righi <andrea.righi@canonical.com>
drivers/net/xen-netfront.c