Lu Baolu 82c3cefb9f iommu: Don't use lazy flush for untrusted device
The lazy IOTLB flushing setup leaves a time window, in which the device
can still access some system memory, which has already been unmapped by
the device driver. It's not suitable for untrusted devices. A malicious
device might use this to attack the system by obtaining data that it
shouldn't obtain.

Fixes: c588072bba6b5 ("iommu/vt-d: Convert intel iommu driver to the iommu ops")
Signed-off-by: Lu Baolu <baolu.lu@linux.intel.com>
Link: https://lore.kernel.org/r/20210225061454.2864009-1-baolu.lu@linux.intel.com
Signed-off-by: Joerg Roedel <jroedel@suse.de>
2021-03-04 13:22:28 +01:00
..
2020-12-16 13:58:47 -08:00
2020-11-23 14:16:55 +00:00
2020-11-23 14:16:55 +00:00
2020-11-23 14:16:55 +00:00
2020-11-23 14:16:55 +00:00
2021-01-28 20:29:56 +00:00
2021-02-01 11:31:19 +00:00