From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751974AbdHHCnR (ORCPT ); Mon, 7 Aug 2017 22:43:17 -0400 Received: from mail.kernel.org ([198.145.29.99]:48766 "EHLO mail.kernel.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751755AbdHHCnQ (ORCPT ); Mon, 7 Aug 2017 22:43:16 -0400 DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 9B19022C9E Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=kernel.org Authentication-Results: mail.kernel.org; spf=none smtp.mailfrom=luto@kernel.org From: Andy Lutomirski To: x86@kernel.org Cc: linux-kernel@vger.kernel.org, Borislav Petkov , Andy Lutomirski , stable@vger.kernel.org Subject: [PATCH urgent] x86/asm/64: Clear AC on NMI entries Date: Mon, 7 Aug 2017 19:43:13 -0700 Message-Id: <314cc9f294e8f14ed85485727556ad4f15bb1659.1502159503.git.luto@kernel.org> X-Mailer: git-send-email 2.13.3 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org This closes a hole in our SMAP implementation. This patch comes from grsecurity. Good catch! Cc: stable@vger.kernel.org Signed-off-by: Andy Lutomirski --- arch/x86/entry/entry_64.S | 2 ++ 1 file changed, 2 insertions(+) diff --git a/arch/x86/entry/entry_64.S b/arch/x86/entry/entry_64.S index d271fb79248f..6d078b89a5e8 100644 --- a/arch/x86/entry/entry_64.S +++ b/arch/x86/entry/entry_64.S @@ -1211,6 +1211,8 @@ ENTRY(nmi) * other IST entries. */ + ASM_CLAC + /* Use %rdx as our temp variable throughout */ pushq %rdx -- 2.13.3