[PATCH urgent] x86/asm/64: Clear AC on NMI entries
From: Andy Lutomirski
Date: Mon Aug 07 2017 - 22:43:43 EST
This closes a hole in our SMAP implementation.
This patch comes from grsecurity. Good catch!
Cc: stable@xxxxxxxxxxxxxxx
Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
---
arch/x86/entry/entry_64.S | 2 ++
1 file changed, 2 insertions(+)
diff --git a/arch/x86/entry/entry_64.S b/arch/x86/entry/entry_64.S
index d271fb79248f..6d078b89a5e8 100644
--- a/arch/x86/entry/entry_64.S
+++ b/arch/x86/entry/entry_64.S
@@ -1211,6 +1211,8 @@ ENTRY(nmi)
* other IST entries.
*/
+ ASM_CLAC
+
/* Use %rdx as our temp variable throughout */
pushq %rdx
--
2.13.3