Re: UAF during boot on MTL based devices with attached dock

[Lukas Wunner <lukas@wunner.de>]

On Tue, Oct 08, 2024 at 07:37:32PM +0300, mika.westerberg@linux.intel.com wrote:
> On Tue, Oct 08, 2024 at 03:58:34PM +0200, Lukas Wunner wrote:
> > Finally, I'd appreciate if you could send me dmesg output with the
> > refcounting fix applied.  As said before, the MTL Thunderbolt controller
> > claims that the link and slot presence bits are cleared, so it
> > de-enumerates everything attached via Thunderbolt.  I'm wondering
> > if it then re-enumerates the Thunderbolt-attached devices so they're
> > actually usable?
> > 
> > I'm hoping Mika can clarify with Intel Thunderbolt CoE whether this
> > is a hardware issue in MTL that can e.g. be fixed through a firmware
> > or BIOS update.
> 
> I think here it happens because we reset the host router when the driver
> probes so all the BIOS CM created tunnels will be torn down as well.

Okay this seems to have been introduced by 0fc70886569c ("thunderbolt:
Reset USB4 v2 host router").

Is that a good idea though?  What if the machine was booted from a
Thunderbolt-attached drive?  At least on Macs that has been supported
since day 1.  I'd assume that it may cause issues if the connection to
the drive on which the root partition resides is forcefully torn down
and re-established?

Thanks,

Lukas