Juergen Gross 98bdfdf89e xen/scsifront: don't use gnttab_query_foreign_access() for mapped status
Commit 33172ab50a53578a95691310f49567c9266968b0 upstream.

It isn't enough to check whether a grant is still being in use by
calling gnttab_query_foreign_access(), as a mapping could be realized
by the other side just after having called that function.

In case the call was done in preparation of revoking a grant it is
better to do so via gnttab_try_end_foreign_access() and check the
success of that operation instead.

This is CVE-2022-23038 / part of XSA-396.

Reported-by: Demi Marie Obenour <demi@invisiblethingslab.com>
Signed-off-by: Juergen Gross <jgross@suse.com>
Reviewed-by: Jan Beulich <jbeulich@suse.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-03-11 10:03:32 +01:00
..
2020-12-29 13:44:50 +01:00
2021-05-22 10:40:18 +02:00
2016-07-20 17:38:35 -06:00
2015-04-27 10:10:19 -07:00
2015-04-27 10:04:39 -07:00
2015-04-27 10:05:55 -07:00
2015-04-17 10:13:56 -07:00
2015-11-25 22:08:55 -05:00
2021-11-26 11:48:36 +01:00
2016-02-23 21:27:02 -05:00
2016-05-10 22:01:07 -04:00
2017-12-20 10:07:22 +01:00
2016-02-25 21:10:53 -05:00
2019-11-28 18:28:23 +01:00
2016-01-27 20:36:10 +08:00
2021-05-22 10:40:25 +02:00
2016-01-27 20:36:10 +08:00
2016-09-26 20:49:25 -04:00
2016-02-23 21:27:02 -05:00
2016-11-28 15:51:31 -05:00
2016-10-07 09:28:53 -07:00
2016-02-23 21:27:02 -05:00
2021-05-22 10:40:26 +02:00
2022-01-27 08:47:40 +01:00
2022-01-27 08:47:40 +01:00
2015-11-18 11:59:09 -05:00
2016-02-23 21:27:02 -05:00
2021-05-22 10:40:26 +02:00