Re: [PATCH] KVM: arm64: Fix alignment of kvm_hyp_memcache allocations

From: Marc Zyngier
Date: Thu Feb 13 2025 - 13:03:00 EST


On Thu, 13 Feb 2025 15:36:14 +0000, Quentin Perret wrote:
> When allocating guest stage-2 page-table pages at EL2, pKVM can consume
> pages from the host-provided kvm_hyp_memcache. As pgtable.c expects
> zeroed pages, guest_s2_zalloc_page() actively implements this zeroing
> with a PAGE_SIZE memset. Unfortunately, we don't check the page
> alignment of the host-provided address before doing so, which could
> lead to the memset overrunning the page if the host was malicious.
>
> [...]

Applied to fixes, thanks!

[1/1] KVM: arm64: Fix alignment of kvm_hyp_memcache allocations
commit: b938731ed2d4eea8e268a27bfc600581fedae2a9

Cheers,

M.
--
Without deviation from the norm, progress is not possible.