Re: [PATCH v2] hw/nvme: fix CVE-2021-3929

2022-01-24 Thread Klaus Jensen
On Jan 21 07:32, Klaus Jensen wrote: > From: Klaus Jensen > > This fixes CVE-2021-3929 "locally" by denying DMA to the iomem of the > device itself. This still allows DMA to MMIO regions of other devices > (e.g. doing P2P DMA to the controller memory buffer of another NVMe > device). > > Fixes:

Re: [PATCH v2] hw/nvme: fix CVE-2021-3929

2022-01-22 Thread Philippe Mathieu-Daudé via
On 21/1/22 07:32, Klaus Jensen wrote: From: Klaus Jensen This fixes CVE-2021-3929 "locally" by denying DMA to the iomem of the device itself. This still allows DMA to MMIO regions of other devices (e.g. doing P2P DMA to the controller memory buffer of another NVMe device). Fixes:

[PATCH v2] hw/nvme: fix CVE-2021-3929

2022-01-21 Thread Klaus Jensen
From: Klaus Jensen This fixes CVE-2021-3929 "locally" by denying DMA to the iomem of the device itself. This still allows DMA to MMIO regions of other devices (e.g. doing P2P DMA to the controller memory buffer of another NVMe device). Fixes: CVE-2021-3929 Reported-by: Qiuhao Li Reviewed-by: