[PATCH urgent] x86/asm/64: Clear AC on NMI entries

From: Andy Lutomirski
Date: Mon Aug 07 2017 - 22:43:43 EST


This closes a hole in our SMAP implementation.

This patch comes from grsecurity. Good catch!

Cc: stable@xxxxxxxxxxxxxxx
Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
---
arch/x86/entry/entry_64.S | 2 ++
1 file changed, 2 insertions(+)

diff --git a/arch/x86/entry/entry_64.S b/arch/x86/entry/entry_64.S
index d271fb79248f..6d078b89a5e8 100644
--- a/arch/x86/entry/entry_64.S
+++ b/arch/x86/entry/entry_64.S
@@ -1211,6 +1211,8 @@ ENTRY(nmi)
* other IST entries.
*/

+ ASM_CLAC
+
/* Use %rdx as our temp variable throughout */
pushq %rdx

--
2.13.3