[PATCH] KVM: arm64: Reload PTE after invoking walker callback on preorder traversal

[Marc Zyngier]

On Mon, 22 May 2023 11:32:58 +0100, Fuad Tabba wrote:
> The preorder callback on the kvm_pgtable_stage2_map() path can replace
> a table with a block, then recursively free the detached table. The
> higher-level walking logic stashes the old page table entry and
> then walks the freed table, invoking the leaf callback and
> potentially freeing pgtable pages prematurely.
> 
> In normal operation, the call to tear down the detached stage-2
> is indirected and uses an RCU callback to trigger the freeing.
> RCU is not available to pKVM, which is where this bug is
> triggered.
> 
> [...]

Applied to fixes, thanks!

[1/1] KVM: arm64: Reload PTE after invoking walker callback on preorder traversal
      commit: a9f0e3d5a089d0844abb679a5e99f15010d53e25

Cheers,

	M.
-- 
Without deviation from the norm, progress is not possible.