[PATCH] arm64: mm: disable PAN during caches_clean_inval_user_pou

From: Brandt, Oliver - Lenze
Date: Mon Jan 08 2024 - 08:00:58 EST


Using the cacheflush() syscall from an 32-bit user-space fails when
ARM64_PAN is used. We 'll get an endless loop:

1. executing "dc cvau, x2" results in raising an abort
2. abort handler does not fix the reason for the abort and
returns to 1.

Disabling PAN for the time of the cache maintenance fixes this.

Fixes: 338d4f49d6f7 ("arm64: kernel: Add support for Privileged Access Never")
Cc: stable@xxxxxxxxxxxxxxx
Signed-off-by: Oliver Brandt <oliver.brandt@xxxxxxxxx>
---
arch/arm64/mm/cache.S | 2 ++
1 file changed, 2 insertions(+)

diff --git a/arch/arm64/mm/cache.S b/arch/arm64/mm/cache.S
index 503567c864fde..333c4c2baa568 100644
--- a/arch/arm64/mm/cache.S
+++ b/arch/arm64/mm/cache.S
@@ -70,10 +70,12 @@ SYM_FUNC_ALIAS(__pi_caches_clean_inval_pou, caches_clean_inval_pou)
*/
SYM_FUNC_START(caches_clean_inval_user_pou)
uaccess_ttbr0_enable x2, x3, x4
+ ALTERNATIVE("nop", SET_PSTATE_PAN(0), ARM64_HAS_PAN, CONFIG_ARM64_PAN)

caches_clean_inval_pou_macro 2f
mov x0, xzr
1:
+ ALTERNATIVE("nop", SET_PSTATE_PAN(1), ARM64_HAS_PAN, CONFIG_ARM64_PAN)
uaccess_ttbr0_disable x1, x2
ret
2:
--
2.43.0