tree 2c84d6748a2aeff0f98ef5abbcc0144273bb8978
parent 41b3254c93acc56adc3c4477fef7c9512d47659e
author Matthew Garrett <mjg@redhat.com> 1335816690 -0400
committer Linus Torvalds <torvalds@linux-foundation.org> 1335825018 -0700

efi: Validate UEFI boot variables

A common flaw in UEFI systems is a refusal to POST triggered by a malformed
boot variable. Once in this state, machines may only be restored by
reflashing their firmware with an external hardware device. While this is
obviously a firmware bug, the serious nature of the outcome suggests that
operating systems should filter their variable writes in order to prevent
a malicious user from rendering the machine unusable.

Signed-off-by: Matthew Garrett <mjg@redhat.com>
Cc: stable@vger.kernel.org
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>