Juergen Gross 33172ab50a
xen/scsifront: don't use gnttab_query_foreign_access() for mapped status ...
It isn't enough to check whether a grant is still being in use by
calling gnttab_query_foreign_access(), as a mapping could be realized
by the other side just after having called that function.
In case the call was done in preparation of revoking a grant it is
better to do so via gnttab_try_end_foreign_access() and check the
success of that operation instead.
This is CVE-2022-23038 / part of XSA-396.
Reported-by: Demi Marie Obenour <demi@invisiblethingslab.com>
Signed-off-by: Juergen Gross <jgross@suse.com>
Reviewed-by: Jan Beulich <jbeulich@suse.com>
---
V2:
- use gnttab_try_end_foreign_access()
2022-03-07 09:48:54 +01:00
2022-02-08 12:15:04 +01:00
2022-02-18 19:36:36 +01:00
2021-12-17 11:34:35 +00:00
2022-01-03 13:44:38 +01:00
2022-02-23 09:39:37 +09:00
2022-02-28 11:36:01 +00:00
2022-03-03 00:30:31 +01:00
2022-02-25 12:30:01 -08:00
2022-03-07 09:48:54 +01:00
2022-01-18 10:05:48 +02:00
2022-02-06 13:19:46 +01:00
2022-01-22 08:33:35 +02:00
2022-02-04 19:22:32 +01:00
2022-02-17 17:05:07 -08:00
2022-02-18 10:08:45 +02:00
2022-01-26 18:57:09 -08:00
2022-01-26 19:40:33 +01:00
2022-02-09 13:18:49 +05:30
2022-01-05 18:31:17 +01:00
2022-01-31 11:22:53 +11:00
2022-01-04 17:29:31 -08:00
2022-01-15 20:37:06 +02:00
2022-02-15 11:04:16 +05:30
2022-02-01 13:18:09 +05:30
2022-02-15 15:54:46 +01:00
2021-12-24 15:27:52 +09:00
2022-02-28 12:51:14 -08:00
2021-12-22 15:38:12 +01:00
2022-02-27 12:30:54 -08:00
2022-03-04 13:04:11 +10:00
2021-12-21 10:13:26 +01:00
2022-03-05 15:49:45 -08:00
2022-02-09 14:33:21 +00:00
2022-02-22 08:15:39 -08:00
2022-02-18 10:37:33 +01:00
2022-01-13 02:05:50 +01:00
2022-02-21 17:58:09 +01:00
2022-02-25 16:46:51 -04:00
2022-03-01 20:41:22 -08:00
2022-02-28 14:01:57 +01:00
2022-02-02 10:49:29 +00:00
2021-12-30 12:12:12 -08:00
2022-01-12 16:59:22 -08:00
2022-01-22 08:33:35 +02:00
2022-01-13 11:19:07 -08:00
2022-02-17 07:54:03 -07:00
2022-01-23 06:20:44 +02:00
2022-01-11 11:35:28 -08:00
2022-01-10 10:33:52 -05:00
2022-01-12 11:11:34 -08:00
2022-02-04 16:27:44 +01:00
2022-02-08 16:04:49 +01:00
2022-02-25 12:12:06 -08:00
2022-03-07 09:48:54 +01:00
2022-01-12 14:17:45 +00:00
2022-01-28 10:19:16 -05:00
2022-01-22 08:33:37 +02:00
2022-01-18 10:05:48 +02:00
2022-02-23 14:43:11 +01:00
2022-02-21 17:59:25 +01:00
2022-02-17 17:13:52 -06:00
2022-01-28 10:15:34 +01:00
2022-02-27 13:07:40 -08:00
2022-01-16 08:08:11 +02:00
2022-01-13 09:05:29 -08:00
2022-02-02 10:33:04 +05:30
2022-02-28 23:53:19 +01:00
2022-02-24 13:48:39 +01:00
2022-01-22 08:33:37 +02:00
2022-02-11 21:19:51 +01:00
2021-12-27 16:51:12 +01:00
2022-03-02 09:51:21 -08:00
2022-01-20 13:25:01 +02:00
2021-12-21 10:22:19 +01:00
2022-02-22 11:56:29 +00:00
2022-01-17 16:44:26 -06:00
2022-01-10 08:32:37 -08:00
2022-01-27 11:23:26 +02:00
2022-01-16 23:50:34 +01:00
2022-02-09 22:55:01 +01:00
2022-03-07 09:48:54 +01:00
2022-02-28 12:51:14 -08:00
2022-01-14 16:02:28 +01:00
2022-02-25 12:37:41 -08:00
2021-12-17 17:18:18 +01:00
2022-02-15 17:14:22 +01:00
2022-01-24 23:30:24 -05:00
2022-02-18 17:30:01 +01:00
2022-03-01 16:11:38 +01:00
2021-12-28 10:43:56 +03:00
2022-02-25 11:45:29 -08:00
2021-12-29 10:54:50 +01:00
2022-02-24 14:51:45 +01:00
2022-01-18 10:05:48 +02:00
2022-01-20 13:31:46 +02:00
2022-02-23 12:32:33 +00:00
2022-02-11 12:06:15 +10:00
2022-01-23 06:20:44 +02:00
2022-01-14 18:50:53 -05:00
2021-12-21 10:38:13 +01:00
2022-01-17 08:07:57 +02:00
2022-03-07 09:48:54 +01:00
2022-01-22 08:33:37 +02:00
33172ab50a