[PATCH v2] KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables

Oliver Upton oupton at kernel.org
Sat Aug 8 11:35:40 PDT 2026


On Fri, 07 Aug 2026 10:55:34 +0800, Qihang wrote:
> vgic_v3_save_pending_tables() iterates dist->lpi_xa using xa_for_each()
> and dereferences the returned struct vgic_irq in the loop body without
> holding a reference on the LPI.
> 
> The xarray iterator only provides temporary RCU coverage while looking up
> the current entry. That is not sufficient for this loop body, which reads
> fields from struct vgic_irq and performs guest memory accesses before the
> iteration completes.
> 
> [...]

Applied to next, thanks!

[1/1] KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables
      https://git.kernel.org/kvmarm/kvmarm/c/f5b8f203bfc0

--
Best,
Oliver



More information about the linux-arm-kernel mailing list