1 files changed, 6 insertions, 0 deletions

diff --git a/drivers/acpi/tables.c b/drivers/acpi/tables.c
index b32327759380..180ac4329763 100644
--- a/drivers/acpi/tables.c
+++ b/drivers/acpi/tables.c
@@ -20,6 +20,7 @@
 #include <linux/memblock.h>
 #include <linux/earlycpio.h>
 #include <linux/initrd.h>
+#include <linux/security.h>
 #include "internal.h"
 
 #ifdef CONFIG_ACPI_CUSTOM_DSDT
@@ -578,6 +579,11 @@ void __init acpi_table_upgrade(void)
         if (table_nr == 0)
                 return;
 
+        if (security_locked_down(LOCKDOWN_ACPI_TABLES)) {
+                pr_notice("kernel is locked down, ignoring table override\n");
+                return;
+        }
+
         acpi_tables_addr =
                 memblock_find_in_range(0, ACPI_TABLE_UPGRADE_MAX_PHYS,
                                        all_tables_size, PAGE_SIZE);