]> git.proxmox.com Git - mirror_ubuntu-artful-kernel.git/commit
x86/mm: Only set IBPB when the new thread cannot ptrace current thread
authorTim Chen <tim.c.chen@linux.intel.com>
Tue, 7 Nov 2017 21:52:42 +0000 (13:52 -0800)
committerKleber Sacilotto de Souza <kleber.souza@canonical.com>
Thu, 11 Jan 2018 18:49:43 +0000 (19:49 +0100)
commit65941af723059ffeeca269b99ab51b3c9e320751
treeede2a07f84587105687bbdfe4964e3a21dc5e278
parenta3320203792b633fb96df5d0bbfb7036129b78e2
x86/mm: Only set IBPB when the new thread cannot ptrace current thread

CVE-2017-5753
CVE-2017-5715

To reduce overhead of setting IBPB, we only do that when
the new thread cannot ptrace the current one.  If the new
thread has ptrace capability on current thread, it is safe.

Signed-off-by: Tim Chen <tim.c.chen@linux.intel.com>
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>
arch/x86/mm/tlb.c
include/linux/ptrace.h
kernel/ptrace.c