Commits on Sep 20, 2023

1. boot: skip loading DTBs in type 1 when secure boot is enabled …

   The kernel loads the DTB from EFI before ExitBootServices():
   
   https://github.com/torvalds/linux/blob/v6.5/drivers/firmware/efi/libstub/fdt.c#L245
   
   DTBs can map and assign arbitrary memory ranges. The kernel refuses
   to load one from the dtb= kernel command line parameter when secure
   boot is enabled, as it's not safe. Let's do the same for type 1
   entries, as they are unverified.
   
   This only affects arm64 and riscv64, firmwares do not support DTB
   on x86.
   
   (cherry picked from commit 4b4d612)
   (cherry picked from commit c1404ff)
   (cherry picked from commit 7844c65)
   (cherry picked from commit f381320)
   (cherry picked from commit 3c97ff5)

   

   bluca committed Sep 20, 2023
   Configuration menu

   • View commit details
   • Copy full SHA for 7cc24c9
   • Browse repository at this point

   Copy the full SHA

   7cc24c9 View commit details

   Browse the repository at this point in the history