iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers/acpi
History
Jason A. Donenfeld 824d0b6225 ACPI: configfs: Disallow loading ACPI tables when locked down 
commit 75b0cea7bf307f362057cc778efe89af4c615354 upstream.

Like other vectors already patched, this one here allows the root
user to load ACPI tables, which enables arbitrary physical address
writes, which in turn makes it possible to disable lockdown.

Prevents this by checking the lockdown status before allowing a new
ACPI table to be installed. The link in the trailer shows a PoC of
how this might be used.

Link: https://git.zx2c4.com/american-unsigned-language/tree/american-unsigned-language-2.sh
Cc: 5.4+ <stable@vger.kernel.org> # 5.4+
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-06-30 15:37:07 -04:00
..
acpica
ACPICA: Dispatcher: add status checks
2020-06-22 09:30:52 +02:00
apei
x86/mm: split vmalloc_sync_all()
2020-03-25 08:25:58 +01:00
arm64
ACPI/IORT: Fix PMCG node single ID mapping handling
2020-06-22 09:30:54 +02:00
dptf
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500
2019-06-19 17:09:55 +02:00
hmat
ACPI: HMAT: ACPI_HMAT_MEMORY_PD_VALID is deprecated since ACPI-6.3
2019-10-03 10:15:57 +02:00
nfit
acpi/nfit: improve bounds checking for 'func'
2020-04-21 09:04:52 +02:00
pmic
ACPI / PMIC: intel: Drop double removal of address space handler
2019-07-03 13:03:41 +02:00
x86
x86/intel: Aggregate big core mobile naming
2019-08-28 11:29:31 +02:00
ac.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
acpi_adxl.c
ACPI/ADXL: Add address translation interface using an ACPI DSM
2018-10-16 10:03:00 +02:00
acpi_amba.c
Merge 5.2-rc6 into char-misc-next
2019-06-23 09:23:33 +02:00
acpi_apd.c
i2c: imx: ACPI support for NXP i2c controller
2019-09-13 15:12:38 +01:00
acpi_cmos_rtc.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500
2019-06-19 17:09:55 +02:00
acpi_configfs.c
ACPI: configfs: Disallow loading ACPI tables when locked down
2020-06-30 15:37:07 -04:00
acpi_dbg.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500
2019-06-19 17:09:55 +02:00
acpi_extlog.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 437
2019-06-05 17:37:17 +02:00
acpi_ipmi.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
acpi_lpat.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 174
2019-05-30 11:26:41 -07:00
acpi_lpit.c
Merge branches 'acpi-pm' and 'pm-pci'
2019-07-08 10:49:36 +02:00
acpi_lpss.c
ACPI: LPSS: Add dmi quirk for skipping _DEP check for some device-links
2019-12-17 19:56:32 +01:00
acpi_memhotplug.c
mm/memory_hotplug: rename walk_memory_range() and pass start+size instead of pfns
2019-07-18 17:08:06 -07:00
acpi_pad.c
ACPI, x86: Add Zhaoxin processors support for NONSTOP TSC
2019-06-22 11:45:57 +02:00
acpi_platform.c
ACPI: platform: Unregister stale platform devices
2020-01-26 10:01:04 +01:00
acpi_pnp.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500
2019-06-19 17:09:55 +02:00
acpi_processor.c
ACPI / processor: don't print errors for processorIDs == 0xff
2019-08-09 10:48:34 +02:00
acpi_tad.c
ACPI: TAD: Add low-level support for real time capability
2018-10-18 09:11:53 +02:00
acpi_video.c
ACPI: video: Add new hw_changes_brightness quirk, set it on PB Easynote MZ35
2019-07-16 17:30:09 +02:00
acpi_watchdog.c
ACPI: watchdog: Allow disabling WDAT at boot
2020-03-21 08:11:47 +01:00
battery.c
ACPI / battery: Deal better with neither design nor full capacity not being reported
2020-02-11 04:35:20 -08:00
bgrt.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500
2019-06-19 17:09:55 +02:00
blacklist.c
ACPI: blacklist: fix clang warning for unused DMI table
2019-07-11 22:45:00 +02:00
bus.c
ACPI: bus: Fix NULL pointer check in acpi_bus_get_private_data()
2019-12-17 19:56:34 +01:00
button.c
ACPI: button: Add DMI quirk for Razer Blade Stealth 13 late 2019 lid switch
2020-02-24 08:36:43 +01:00
cm_sbs.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
container.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
cppc_acpi.c
ACPI: CPPC: Fix reference count leak in acpi_cppc_processor_probe()
2020-06-17 16:40:28 +02:00
custom_method.c
Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2019-09-28 08:14:15 -07:00
debugfs.c
treewide: Add SPDX license identifier for missed files
2019-05-21 10:50:45 +02:00
device_pm.c
ACPI: PM: Avoid using power resources if there are none for D0
2020-06-17 16:40:28 +02:00
device_sysfs.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 174
2019-05-30 11:26:41 -07:00
dock.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
ec_sys.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 482
2019-06-19 17:09:52 +02:00
ec.c
ACPI: EC: PM: Avoid flushing EC work when EC GPE is inactive
2020-05-27 17:46:10 +02:00
event.c
ACPI: event: replace strcpy() by strscpy()
2019-04-23 10:54:26 +02:00
evged.c
ACPI: GED: use correct trigger type field in _Exx / _Lxx handling
2020-06-22 09:30:49 +02:00
fan.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
glue.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 428
2019-06-05 17:37:16 +02:00
hed.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 174
2019-05-30 11:26:41 -07:00
internal.h
ACPI: EC: PM: Avoid premature returns from acpi_s2idle_wake()
2020-05-20 08:20:18 +02:00
ioapic.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500
2019-06-19 17:09:55 +02:00
irq.c
Merge branch 'irq-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2019-07-08 11:01:13 -07:00
Kconfig
ia64: remove support for machvecs
2019-08-16 14:32:26 -07:00
Makefile
acpi/hmat: Parse and report heterogeneous memory
2019-04-04 18:41:20 +02:00
numa.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
nvs.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 428
2019-06-05 17:37:16 +02:00
osi.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
osl.c
ACPI: OSL: only free map once in osl.c
2019-12-17 19:56:33 +01:00
pci_irq.c
ACPI / PCI: fix acpi_pci_irq_enable() memory leak
2019-09-03 09:41:25 +02:00
pci_link.c
ACPI/PCI: Remove surplus parentheses from a return statement
2019-08-21 00:05:20 +02:00
pci_mcfg.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 459
2019-06-19 17:09:09 +02:00
pci_root.c
PCI: Move ASPM declarations to linux/pci.h
2019-08-28 08:28:39 -05:00
pci_slot.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 491
2019-06-19 17:09:52 +02:00
power.c
ACPI / PM: Introduce concept of a _PR0 dependent device
2019-06-27 12:31:57 +02:00
pptt.c
ACPI/PPTT: Add support for ACPI 6.3 thread flag
2019-08-12 12:59:15 +01:00
proc.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
processor_core.c
treewide: Add SPDX license identifier for missed files
2019-05-21 10:50:45 +02:00
processor_driver.c
cpufreq: Use per-policy frequency QoS
2019-10-21 02:05:21 +02:00
processor_idle.c
ACPI, x86: Add Zhaoxin processors support for NONSTOP TSC
2019-06-22 11:45:57 +02:00
processor_pdc.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
processor_perflib.c
ACPI: processor: Add QoS requests for all CPUs
2019-10-25 11:33:48 +02:00
processor_thermal.c
ACPI: processor: Add QoS requests for all CPUs
2019-10-25 11:33:48 +02:00
processor_throttling.c
x86: ACPI: fix CPU hotplug deadlock
2020-04-23 10:36:38 +02:00
property.c
Char/Misc driver patches for 5.4-rc1
2019-09-18 11:14:31 -07:00
reboot.c
ACPI: Allow CONFIG_PCI to be unset for reboot
2018-12-20 10:19:49 +01:00
resource.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 174
2019-05-30 11:26:41 -07:00
sbs.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
sbshc.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 372
2019-06-05 17:37:10 +02:00
sbshc.h
ACPI: SBS: remove unused const variable 'SMBUS_PEC'
2019-08-23 12:55:09 +02:00
scan.c
ACPI: PM: Avoid using power resources if there are none for D0
2020-06-17 16:40:28 +02:00
sleep.c
ACPI: EC: PM: Avoid flushing EC work when EC GPE is inactive
2020-05-27 17:46:10 +02:00
sleep.h
ACPI: PM: Add acpi_[un]register_wakeup_handler()
2020-04-13 10:48:08 +02:00
spcr.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500
2019-06-19 17:09:55 +02:00
sysfs.c
ACPI: sysfs: Fix pm_profile_attr type
2020-06-30 15:37:06 -04:00
tables.c
Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2019-09-28 08:14:15 -07:00
thermal.c
ACPI: thermal: Remove redundant acpi_has_method() calls
2019-09-02 22:52:50 +02:00
utils.c
bus_find_device: Unify the match callback with class_find_device
2019-06-24 05:22:31 +02:00
video_detect.c
ACPI: video: Do not export a non working backlight interface on MSI MS-7721 boards
2020-02-11 04:35:19 -08:00
wakeup.c
ACPI: PM: Add acpi_[un]register_wakeup_handler()
2020-04-13 10:48:08 +02:00