Re: [PATCH 1/1] iommu: Don't use lazy flush for untrusted device

2021-03-25 Thread Will Deacon
On Thu, Feb 25, 2021 at 02:14:54PM +0800, Lu Baolu wrote: > The lazy IOTLB flushing setup leaves a time window, in which the device > can still access some system memory, which has already been unmapped by > the device driver. It's not suitable for untrusted devices. A malicious > device might use

[PATCH 1/1] iommu: Don't use lazy flush for untrusted device

2021-02-24 Thread Lu Baolu
The lazy IOTLB flushing setup leaves a time window, in which the device can still access some system memory, which has already been unmapped by the device driver. It's not suitable for untrusted devices. A malicious device might use this to attack the system by obtaining data that it shouldn't