x86/ibt: Disable IBT around firmware
authorPeter Zijlstra <peterz@infradead.org>
Tue, 8 Mar 2022 15:30:38 +0000 (16:30 +0100)
committerPeter Zijlstra <peterz@infradead.org>
Tue, 15 Mar 2022 09:32:40 +0000 (10:32 +0100)
commitfe379fa4d199abc52d5b4a256e52cf94eff685cf
tree4466b0d16bc23c3b36f574ef17113bb3cbcfd497
parent99c95c5d4f1027130d555fdb27b576520894827d
x86/ibt: Disable IBT around firmware

Assume firmware isn't IBT clean and disable it across calls.

Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org>
Reviewed-by: Kees Cook <keescook@chromium.org>
Acked-by: Josh Poimboeuf <jpoimboe@redhat.com>
Link: https://lore.kernel.org/r/20220308154318.759989383@infradead.org
arch/x86/include/asm/efi.h
arch/x86/include/asm/ibt.h
arch/x86/kernel/apm_32.c
arch/x86/kernel/cpu/common.c