[UBUNTU 21.04] s390/pci: vfio-pci mmio being disabled erroneously
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Ubuntu on IBM z Systems |
Fix Released
|
High
|
Skipper Bug Screeners | ||
linux (Ubuntu) |
Fix Released
|
Medium
|
Unassigned | ||
Focal |
Fix Released
|
Medium
|
Frank Heimes | ||
Groovy |
Fix Released
|
Medium
|
Unassigned | ||
Hirsute |
Fix Released
|
Medium
|
Unassigned |
Bug Description
Description: s390/pci: vfio-pci mmio being disabled erroneously
Symptom: PCI virtual functions passed through via vfio-pci are unusable
Problem: The fix for CVE-2020-12888 'abafbc551fdd vfio-pci: Invalidate
the issue for virtual functions on s390 that are first passed
as they are not identified as VFs in the traditional sense
Solution: Identify devices beyond traditional linked VFs that vfio must
Reproduction: Pass a PCI Virtual Function to a qemu-kvm guest via vfio-pci
Upstream-ID: 12856e7acde4702
These patches need to be applied for 20.10 and 20.04.
The git-commits will apply cleanly on the dedicated kernels.
Manx thx
CVE References
tags: | added: architecture-s39064 bugnameltc-190039 severity-high targetmilestone-inin--- |
Changed in ubuntu: | |
assignee: | nobody → Skipper Bug Screeners (skipper-screen-team) |
affects: | ubuntu → linux (Ubuntu) |
Changed in ubuntu-z-systems: | |
importance: | Undecided → High |
status: | New → Triaged |
Changed in ubuntu-z-systems: | |
status: | Triaged → In Progress |
Changed in linux (Ubuntu Groovy): | |
importance: | Undecided → Medium |
Changed in linux (Ubuntu Hirsute): | |
importance: | Undecided → Medium |
Changed in linux (Ubuntu Focal): | |
importance: | Undecided → Medium |
tags: |
added: targetmilestone-inin2104 removed: targetmilestone-inin--- |
Changed in linux (Ubuntu Focal): | |
status: | In Progress → Fix Committed |
Changed in ubuntu-z-systems: | |
status: | In Progress → Fix Committed |
Changed in ubuntu-z-systems: | |
status: | Fix Committed → Fix Released |
The the patches/commits needed were upstream accepted with 5.10:
12856e7acde4 "PCI/IOV: Mark VFs as not implementing PCI_COMMAND_MEMORY"
08b6e22b850c "s390/pci: Mark all VFs as not implementing PCI_COMMAND_MEMORY"
515ecd5368f1 "vfio/pci: Decouple PCI_COMMAND_MEMORY bit checks from is_virtfn"
I'm updating the Hirsute entry to In Progress, since 5.10 will soon migrate to the Hirsute archive.