[PATCH] arm64/efi: Clear PTE_WRITE when applying EFI_MEMORY_RO

[Catalin Marinas]

On Fri, 09 Oct 2026 17:16:01 +0200, Ard Biesheuvel wrote:
> set_permissions() sets PTE_RDONLY for regions that the Memory Attributes
> Table describes as read-only, but leaves PTE_WRITE set.  PTE_WRITE is
> the DBM bit, so when hardware dirty state management is enabled
> (TCR_EL1.HD), such a descriptor is writable-clean rather than read-only,
> and a write by the firmware will be permitted by the hardware (which
> marks the entry dirty) instead of faulting.
> 
> [...]

Applied to arm64 (for-next/efi), thanks!

[1/1] arm64/efi: Clear PTE_WRITE when applying EFI_MEMORY_RO
      https://git.kernel.org/arm64/c/215d7b662273