x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()
authorRik van Riel <riel@surriel.com>
Thu, 17 Aug 2023 17:55:58 +0000 (13:55 -0400)
committerIngo Molnar <mingo@kernel.org>
Mon, 18 Sep 2023 07:24:15 +0000 (09:24 +0200)
commit34cf99c250d5cd2530b93a57b0de31d3aaf8685b
tree8708949831d43d7469ed8d74e2fe5f74a20aa503
parentce9ecca0238b140b88f43859b211c9fdfd8e5b70
x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()

The code calling ima_free_kexec_buffer() runs long after the memblock
allocator has already been torn down, potentially resulting in a use
after free in memblock_isolate_range().

With KASAN or KFENCE, this use after free will result in a BUG
from the idle task, and a subsequent kernel panic.

Switch ima_free_kexec_buffer() over to memblock_free_late() to avoid
that bug.

Fixes: fee3ff99bc67 ("powerpc: Move arch independent ima kexec functions to drivers/of/kexec.c")
Suggested-by: Mike Rappoport <rppt@kernel.org>
Signed-off-by: Rik van Riel <riel@surriel.com>
Signed-off-by: Ingo Molnar <mingo@kernel.org>
Link: https://lore.kernel.org/r/20230817135558.67274c83@imladris.surriel.com
arch/x86/kernel/setup.c