Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux

arm64/mm: Reduce PA space to 48 bits when LPA2 is not enabled

Currently, LPA2 kernel support implies support for up to 52 bits of
physical addressing, and this is reflected in global definitions such as
PHYS_MASK_SHIFT and MAX_PHYSMEM_BITS.

This is potentially problematic, given that LPA2 hardware support is
modeled as a CPU feature which can be overridden, and with LPA2 hardware
support turned off, attempting to map physical regions with address bits
[51:48] set (which may exist on LPA2 capable systems booting with
arm64.nolva) will result in corrupted mappings with a truncated output
address and bogus shareability attributes.

This means that the accepted physical address range in the mapping
routines should be at most 48 bits wide when LPA2 support is configured
but not enabled at runtime.

Fixes: 352b0395b505 ("arm64: Enable 52-bit virtual addressing for 4k and 16k granule configs")
Cc: stable@vger.kernel.org
Reviewed-by: Anshuman Khandual <anshuman.khandual@arm.com>
Signed-off-by: Ard Biesheuvel <ardb@kernel.org>
Acked-by: Marc Zyngier <maz@kernel.org>
Link: https://lore.kernel.org/r/20241212081841.2168124-9-ardb+git@google.com
Signed-off-by: Will Deacon <will@kernel.org>

authored by

Ard Biesheuvel and committed by
Will Deacon
bf74bb73 fac04efc

+11 -7
-6
arch/arm64/include/asm/pgtable-hwdef.h
··· 222 222 */ 223 223 #define S1_TABLE_AP (_AT(pmdval_t, 3) << 61) 224 224 225 - /* 226 - * Highest possible physical address supported. 227 - */ 228 - #define PHYS_MASK_SHIFT (CONFIG_ARM64_PA_BITS) 229 - #define PHYS_MASK ((UL(1) << PHYS_MASK_SHIFT) - 1) 230 - 231 225 #define TTBR_CNP_BIT (UL(1) << 0) 232 226 233 227 /*
+7
arch/arm64/include/asm/pgtable-prot.h
··· 81 81 #define lpa2_is_enabled() false 82 82 #define PTE_MAYBE_SHARED PTE_SHARED 83 83 #define PMD_MAYBE_SHARED PMD_SECT_S 84 + #define PHYS_MASK_SHIFT (CONFIG_ARM64_PA_BITS) 84 85 #else 85 86 static inline bool __pure lpa2_is_enabled(void) 86 87 { ··· 90 89 91 90 #define PTE_MAYBE_SHARED (lpa2_is_enabled() ? 0 : PTE_SHARED) 92 91 #define PMD_MAYBE_SHARED (lpa2_is_enabled() ? 0 : PMD_SECT_S) 92 + #define PHYS_MASK_SHIFT (lpa2_is_enabled() ? CONFIG_ARM64_PA_BITS : 48) 93 93 #endif 94 + 95 + /* 96 + * Highest possible physical address supported. 97 + */ 98 + #define PHYS_MASK ((UL(1) << PHYS_MASK_SHIFT) - 1) 94 99 95 100 /* 96 101 * If we have userspace only BTI we don't want to mark kernel pages
+4 -1
arch/arm64/include/asm/sparsemem.h
··· 5 5 #ifndef __ASM_SPARSEMEM_H 6 6 #define __ASM_SPARSEMEM_H 7 7 8 - #define MAX_PHYSMEM_BITS CONFIG_ARM64_PA_BITS 8 + #include <asm/pgtable-prot.h> 9 + 10 + #define MAX_PHYSMEM_BITS PHYS_MASK_SHIFT 11 + #define MAX_POSSIBLE_PHYSMEM_BITS (52) 9 12 10 13 /* 11 14 * Section size must be at least 512MB for 64K base