[PATCH] arm64: process: Fix context switching MTE store-only tag check
Yeoreum Yun
yeoreum.yun at arm.com
Wed Aug 19 08:24:51 PDT 2026
> SCTLR_EL1.TCSO0 is set when user opt-in for MTE store-only tag check
> mode. However, it is not part of SCTLR_USER_MASK which imply that on
> context switch we never clear SCTLR_EL1.TCSO0, so we are leaking that
> setting into another task.
> Fix that by including SCTLR_EL1_TCSO0_MASK into SCTLR_USER_MASK
>
> Fixes: 4d51ff5bba00 ("arm64/kernel: Support store-only mte tag check")
> Signed-off-by: Vladimir Murzin <vladimir.murzin at arm.com>
> ---
> arch/arm64/include/asm/processor.h | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/arch/arm64/include/asm/processor.h b/arch/arm64/include/asm/processor.h
> index c2a627f39314..6dfbcacd9ba0 100644
> --- a/arch/arm64/include/asm/processor.h
> +++ b/arch/arm64/include/asm/processor.h
> @@ -264,7 +264,7 @@ static inline void task_set_sve_vl_onexec(struct task_struct *task,
>
> #define SCTLR_USER_MASK \
> (SCTLR_ELx_ENIA | SCTLR_ELx_ENIB | SCTLR_ELx_ENDA | SCTLR_ELx_ENDB | \
> - SCTLR_EL1_TCF0_MASK)
> + SCTLR_EL1_TCF0_MASK | SCTLR_EL1_TCSO0_MASK)
>
> static inline void arch_thread_struct_whitelist(unsigned long *offset,
> unsigned long *size)
> --
> 2.34.1
Oops, Sorry for this.
Reviewed-by: Yeoreum Yun <yeoreum.yun at arm.com>
--
Sincerely,
Yeoreum Yun
More information about the linux-arm-kernel
mailing list