irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
authorMarc Zyngier <maz@kernel.org>
Wed, 2 Oct 2024 20:49:59 +0000 (21:49 +0100)
committerThomas Gleixner <tglx@linutronix.de>
Tue, 8 Oct 2024 15:44:27 +0000 (17:44 +0200)
commit1442ee0011983f0c5c4b92380e6853afb513841a
tree78f047d12e66129a3021e639081e7974e020fe22
parent6eabf656048d904d961584de2e1d45bc0854f9fb
irqchip/gic-v4: Don't allow a VMOVP on a dying VPE

Kunkun Jiang reported that there is a small window of opportunity for
userspace to force a change of affinity for a VPE while the VPE has already
been unmapped, but the corresponding doorbell interrupt still visible in
/proc/irq/.

Plug the race by checking the value of vmapp_count, which tracks whether
the VPE is mapped ot not, and returning an error in this case.

This involves making vmapp_count common to both GICv4.1 and its v4.0
ancestor.

Fixes: 64edfaa9a234 ("irqchip/gic-v4.1: Implement the v4.1 flavour of VMAPP")
Reported-by: Kunkun Jiang <jiangkunkun@huawei.com>
Signed-off-by: Marc Zyngier <maz@kernel.org>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Cc: stable@vger.kernel.org
Link: https://lore.kernel.org/r/c182ece6-2ba0-ce4f-3404-dba7a3ab6c52@huawei.com
Link: https://lore.kernel.org/all/20241002204959.2051709-1-maz@kernel.org
drivers/irqchip/irq-gic-v3-its.c
include/linux/irqchip/arm-gic-v4.h