Commit 02c7d5b8 authored by David Kaplan's avatar David Kaplan Committed by Borislav Petkov (AMD)
Browse files

x86/pti: Add attack vector controls for PTI 



Disable PTI mitigation if user->kernel attack vector mitigations are
disabled.

Signed-off-by: default avatarDavid Kaplan <david.kaplan@amd.com>
Signed-off-by: default avatarBorislav Petkov (AMD) <bp@alien8.de>
Link: https://lore.kernel.org/20250707183316.1349127-20-david.kaplan@amd.com
parent 0cdd2c4f

arch/x86/mm/pti.c

+3 −1
Original line number Diff line number Diff line
@@ -38,6 +38,7 @@ 
#include <asm/desc.h>

#include <asm/sections.h>

#include <asm/set_memory.h>

#include <asm/bugs.h>



#undef pr_fmt

#define pr_fmt(fmt)     "Kernel/User page tables isolation: " fmt
@@ -84,7 +85,8 @@ void __init pti_check_boottime_disable(void) 
		return;

	}



	if (cpu_mitigations_off())

	if (pti_mode == PTI_AUTO &&

	    !cpu_attack_vector_mitigated(CPU_MITIGATE_USER_KERNEL))

		pti_mode = PTI_FORCE_OFF;

	if (pti_mode == PTI_FORCE_OFF) {

		pti_print_if_insecure("disabled on command line.");