x86/msr: Restrict MSR access when the kernel is locked down

Writing to MSRs should not be allowed if the kernel is locked down, since it could lead to execution of arbitrary code in kernel mode. Based on a patch by Kees Cook.

Matthew Garrett committed 7 years ago

Commit 95f5e951 parent 96c4f673 files · +10 −0Browse files

Showing the changes to include/linux (1 of 3 files). Show all

Unified · Split

include/linux/security.h+1−0

@@ -109,6 +109,7 @@ enum lockdown_reason { · 108 unmodified lines
109	109	LOCKDOWN_HIBERNATION,
110	110	LOCKDOWN_PCI_ACCESS,
111	111	LOCKDOWN_IOPORT,
	112	+ LOCKDOWN_MSR,
112	113	LOCKDOWN_INTEGRITY_MAX,
113	114	LOCKDOWN_CONFIDENTIALITY_MAX,
114	115	};

x86/msr: Restrict MSR access when the kernel is locked down

Keyboard shortcuts

General

Issues and pull requests

Issues, pull requests and Inbox

Repository code