[PATCH v2 0/7] vfio: Interrupt eventfd hardening

From: Alex Williamson
Date: Fri Mar 08 2024 - 18:06:23 EST


This series hardens interrupt code relative to eventfd registration
across several vfio bus drivers, ensuring that NULL eventfds cannot
be triggered by users. Several other more minor issues were discovered
and fixed along the way.

Thanks to Reinette for identifying this latent vulnerability. Thanks,

Alex

v2:
* Add R-b from Kevin & Reinette (thanks!)
* Remove unused hwirqs in 5/ and avoid unnecessary hwirq lookup in
cleanup and init unwind in 6/

Alex Williamson (7):
vfio/pci: Disable auto-enable of exclusive INTx IRQ
vfio/pci: Lock external INTx masking ops
vfio: Introduce interface to flush virqfd inject workqueue
vfio/pci: Create persistent INTx handler
vfio/platform: Disable virqfds on cleanup
vfio/platform: Create persistent IRQ handlers
vfio/fsl-mc: Block calling interrupt handler without trigger

drivers/vfio/fsl-mc/vfio_fsl_mc_intr.c | 7 +-
drivers/vfio/pci/vfio_pci_intrs.c | 176 +++++++++++++---------
drivers/vfio/platform/vfio_platform_irq.c | 105 +++++++++----
drivers/vfio/virqfd.c | 21 +++
include/linux/vfio.h | 2 +
5 files changed, 205 insertions(+), 106 deletions(-)

--
2.44.0