[PATCH 1/2] riscv: do not make the linear map alias executable in set_memory_*()

From: Mike Rapoport (Microsoft)

Date: Thu Nov 12 2026 - 08:49:30 EST


set_memory_*() applies the requested change to the linear map alias of the
range. For set_memory_x() that makes the linear map alias of module text
and of BPF programs executable, although nothing should ever execute that
code through the linear map.

Keep _PAGE_EXEC out of the bits set_memory_*() sets on the linear map
alias.

Fixes: 311cd2f6e253 ("riscv: Fix set_memory_XX() and set_direct_map_XX() by splitting huge linear mappings")
Signed-off-by: Mike Rapoport (Microsoft) <rppt@xxxxxxxxxx>
---
arch/riscv/mm/pageattr.c | 9 +++++++--
1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/arch/riscv/mm/pageattr.c b/arch/riscv/mm/pageattr.c
index 5b3cf326455db..b138113755359 100644
--- a/arch/riscv/mm/pageattr.c
+++ b/arch/riscv/mm/pageattr.c
@@ -271,6 +271,10 @@ static int __set_memory(unsigned long addr, int numpages, pgprot_t set_mask,
.set_mask = set_mask,
.clear_mask = clear_mask
};
+ struct pageattr_masks __maybe_unused lm_masks = {
+ .set_mask = __pgprot(pgprot_val(set_mask) & ~_PAGE_EXEC),
+ .clear_mask = clear_mask
+ };

if (!numpages)
return 0;
@@ -300,7 +304,8 @@ static int __set_memory(unsigned long addr, int numpages, pgprot_t set_mask,
goto unlock;

ret = walk_kernel_page_table_range(lm_start, lm_end,
- &pageattr_ops, NULL, &masks);
+ &pageattr_ops, NULL,
+ &lm_masks);
if (ret)
goto unlock;
}
@@ -318,7 +323,7 @@ static int __set_memory(unsigned long addr, int numpages, pgprot_t set_mask,
goto unlock;

ret = walk_kernel_page_table_range(lm_start, lm_end,
- &pageattr_ops, NULL, &masks);
+ &pageattr_ops, NULL, &lm_masks);
if (ret)
goto unlock;
}

--
2.53.0