Commit 78a00555 authored by Oliver Upton's avatar Oliver Upton Committed by Marc Zyngier
Browse files

KVM: arm64: Ensure vgic_ready() is ordered against MMIO registration 



kvm_vgic_map_resources() prematurely marks the distributor as 'ready',
potentially allowing vCPUs to enter the guest before the distributor's
MMIO registration has been made visible.

Plug the race by marking the distributor as ready only after MMIO
registration is completed. Rely on the implied ordering of
synchronize_srcu() to ensure the MMIO registration is visible before
vgic_dist::ready. This also means that writers to vgic_dist::ready are
now serialized by the slots_lock, which was effectively the case already
as all writers held the slots_lock in addition to the config_lock.

Fixes: 59112e9c ("KVM: arm64: vgic: Fix a circular locking issue")
Signed-off-by: default avatarOliver Upton <oliver.upton@linux.dev>
Link: https://lore.kernel.org/r/20241017001947.2707312-3-oliver.upton@linux.dev


Signed-off-by: default avatarMarc Zyngier <maz@kernel.org>
parent 5978d4ec

arch/arm64/kvm/vgic/vgic-init.c

+11 −2
Original line number Diff line number Diff line
@@ -544,14 +544,23 @@ int kvm_vgic_map_resources(struct kvm *kvm) 
	if (ret)

		goto out;



	dist->ready = true;

	dist_base = dist->vgic_dist_base;

	mutex_unlock(&kvm->arch.config_lock);



	ret = vgic_register_dist_iodev(kvm, dist_base, type);

	if (ret)

	if (ret) {

		kvm_err("Unable to register VGIC dist MMIO regions\n");

		goto out_slots;

	}



	/*

	 * kvm_io_bus_register_dev() guarantees all readers see the new MMIO

	 * registration before returning through synchronize_srcu(), which also

	 * implies a full memory barrier. As such, marking the distributor as

	 * 'ready' here is guaranteed to be ordered after all vCPUs having seen

	 * a completely configured distributor.

	 */

	dist->ready = true;

	goto out_slots;

out:

	mutex_unlock(&kvm->arch.config_lock);