TLB State Access Being Tightened Up On Linux For Better Security
Written by Michael Larabel in Linux Security on 21 April 2020 at 06:46 AM EDT. 8 Comments
LINUX SECURITY --
The latest Linux kernel security work being pursued by Thomas Gleixner is tightening up access around the kernel's per-CPU TLB state access for the translation lookaside buffer.

Currently this x86 per-CPU TLB state access is in exported code that can be accessed by kernel modules, originally done just to satisfy KVM virtualization needs. In beefing up the security, Gleixner has been reworking the x86 TLB state code so only the few bits needed by KVM can still be accessed outside of the core kernel code while the rest will now be hidden away given that there should be no legitimate access needs of it outside of the core kernel code.

These improvements should help prevent potentially sensitive information from possibly being leaked.

The patches are now under review.
Related News
About The Author
Author picture

Michael Larabel is the principal author of Phoronix.com and founded the site in 2004 with a focus on enriching the Linux hardware experience. Michael has written more than 20,000 articles covering the state of Linux hardware support, Linux performance, graphics drivers, and other topics. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and OpenBenchmarking.org automated benchmarking software. He can be followed via Twitter or contacted via MichaelLarabel.com.

Popular News This Week