[PATCH 0/5][Trusty][CVE-2016-2069] Race condition in arch/x86/mm/tlb.c

Luis Henriques luis.henriques at canonical.com
Tue May 10 13:48:00 UTC 2016


Following this email I am sending the backport of the fix for
CVE-2016-2069.  This backport is based on a backport I've done before for
the stable 3.16 (hence the comment in the commit summary referring to this
kernel version).

This CVE is fixed in all the other ubuntu kernels, only Trusty is missing
it.

Obviously, the actual fix is just the 1st patch; I'm sending the 2nd for
completeness.

Andy Lutomirski (2):
  x86/mm: Add barriers and document switch_mm()-vs-flush synchronization
  x86/mm: Improve switch_mm() barrier comments

Jason Gunthorpe (1):
  IB/security: Restrict use of the write() interface

Kangjie Lu (2):
  net: fix infoleak in llc
  net: fix infoleak in rtnetlink

 arch/x86/include/asm/mmu_context.h       | 33 +++++++++++++++++++++++++++++++-
 arch/x86/mm/tlb.c                        | 25 +++++++++++++++++++++---
 drivers/infiniband/core/ucm.c            |  4 ++++
 drivers/infiniband/core/ucma.c           |  3 +++
 drivers/infiniband/core/uverbs_main.c    |  5 +++++
 drivers/infiniband/hw/qib/qib_file_ops.c |  5 +++++
 include/rdma/ib.h                        | 16 ++++++++++++++++
 net/core/rtnetlink.c                     | 18 +++++++++--------
 net/llc/af_llc.c                         |  1 +
 9 files changed, 98 insertions(+), 12 deletions(-)





More information about the kernel-team mailing list