[PATCH v2] KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables
Oliver Upton
oupton at kernel.org
Sat Aug 8 11:35:40 PDT 2026
On Fri, 07 Aug 2026 10:55:34 +0800, Qihang wrote:
> vgic_v3_save_pending_tables() iterates dist->lpi_xa using xa_for_each()
> and dereferences the returned struct vgic_irq in the loop body without
> holding a reference on the LPI.
>
> The xarray iterator only provides temporary RCU coverage while looking up
> the current entry. That is not sufficient for this loop body, which reads
> fields from struct vgic_irq and performs guest memory accesses before the
> iteration completes.
>
> [...]
Applied to next, thanks!
[1/1] KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables
https://git.kernel.org/kvmarm/kvmarm/c/f5b8f203bfc0
--
Best,
Oliver
More information about the linux-arm-kernel
mailing list