| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Wed, 3 Jan 2018 21:11:14 +0100
From: Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To: linux-kernel@...r.kernel.org
Cc: Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
torvalds@...ux-foundation.org, akpm@...ux-foundation.org,
linux@...ck-us.net, shuahkh@....samsung.com, patches@...nelci.org,
ben.hutchings@...ethink.co.uk, lkft-triage@...ts.linaro.org,
stable@...r.kernel.org
Subject: [PATCH 4.9 00/39] 4.9.75-stable review
This is the start of the stable review cycle for the 4.9.75 release.
There are 39 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Fri Jan 5 19:50:44 UTC 2018.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.75-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@...uxfoundation.org>
Linux 4.9.75-rc1
Kees Cook <keescook@...omium.org>
KPTI: Report when enabled
Kees Cook <keescook@...omium.org>
KPTI: Rename to PAGE_TABLE_ISOLATION
Borislav Petkov <bp@...e.de>
x86/kaiser: Move feature detection up
Jiri Kosina <jkosina@...e.cz>
kaiser: disabled on Xen PV
Borislav Petkov <bp@...e.de>
x86/kaiser: Reenable PARAVIRT
Thomas Gleixner <tglx@...utronix.de>
x86/paravirt: Dont patch flush_tlb_single
Hugh Dickins <hughd@...gle.com>
kaiser: kaiser_flush_tlb_on_return_to_user() check PCID
Hugh Dickins <hughd@...gle.com>
kaiser: asm/tlbflush.h handle noPGE at lower level
Hugh Dickins <hughd@...gle.com>
kaiser: drop is_atomic arg to kaiser_pagetable_walk()
Hugh Dickins <hughd@...gle.com>
kaiser: use ALTERNATIVE instead of x86_cr3_pcid_noflush
Borislav Petkov <bp@...e.de>
x86/kaiser: Check boottime cmdline params
Borislav Petkov <bp@...e.de>
x86/kaiser: Rename and simplify X86_FEATURE_KAISER handling
Hugh Dickins <hughd@...gle.com>
kaiser: add "nokaiser" boot option, using ALTERNATIVE
Hugh Dickins <hughd@...gle.com>
kaiser: fix unlikely error in alloc_ldt_struct()
Hugh Dickins <hughd@...gle.com>
kaiser: kaiser_remove_mapping() move along the pgd
Hugh Dickins <hughd@...gle.com>
kaiser: paranoid_entry pass cr3 need to paranoid_exit
Hugh Dickins <hughd@...gle.com>
kaiser: x86_cr3_pcid_noflush and x86_cr3_pcid_user
Hugh Dickins <hughd@...gle.com>
kaiser: PCID 0 for kernel and 128 for user
Hugh Dickins <hughd@...gle.com>
kaiser: load_new_mm_cr3() let SWITCH_USER_CR3 flush user
Hugh Dickins <hughd@...gle.com>
kaiser: enhanced by kernel and user PCIDs
Hugh Dickins <hughd@...gle.com>
kaiser: vmstat show NR_KAISERTABLE as nr_overhead
Hugh Dickins <hughd@...gle.com>
kaiser: delete KAISER_REAL_SWITCH option
Hugh Dickins <hughd@...gle.com>
kaiser: name that 0x1000 KAISER_SHADOW_PGD_OFFSET
Hugh Dickins <hughd@...gle.com>
kaiser: cleanups while trying for gold link
Hugh Dickins <hughd@...gle.com>
kaiser: align addition to x86/mm/Makefile
Hugh Dickins <hughd@...gle.com>
kaiser: tidied up kaiser_add/remove_mapping slightly
Hugh Dickins <hughd@...gle.com>
kaiser: tidied up asm/kaiser.h somewhat
Hugh Dickins <hughd@...gle.com>
kaiser: ENOMEM if kaiser_pagetable_walk() NULL
Hugh Dickins <hughd@...gle.com>
kaiser: fix perf crashes
Hugh Dickins <hughd@...gle.com>
kaiser: fix regs to do_nmi() ifndef CONFIG_KAISER
Hugh Dickins <hughd@...gle.com>
kaiser: KAISER depends on SMP
Hugh Dickins <hughd@...gle.com>
kaiser: fix build and FIXME in alloc_ldt_struct()
Hugh Dickins <hughd@...gle.com>
kaiser: stack map PAGE_SIZE at THREAD_SIZE-PAGE_SIZE
Hugh Dickins <hughd@...gle.com>
kaiser: do not set _PAGE_NX on pgd_none
Dave Hansen <dave.hansen@...ux.intel.com>
kaiser: merged update
Richard Fellner <richard.fellner@...dent.tugraz.at>
KAISER: Kernel Address Isolation
Tom Lendacky <thomas.lendacky@....com>
x86/boot: Add early cmdline parsing for options with arguments
Neal Cardwell <ncardwell@...gle.com>
tcp_bbr: reset long-term bandwidth sampling on loss recovery undo
Neal Cardwell <ncardwell@...gle.com>
tcp_bbr: reset full pipe detection on loss recovery undo
-------------
Diffstat:
Documentation/kernel-parameters.txt | 8 +
Makefile | 4 +-
arch/x86/boot/compressed/misc.h | 1 +
arch/x86/entry/entry_64.S | 163 ++++++++--
arch/x86/entry/entry_64_compat.S | 8 +-
arch/x86/events/intel/ds.c | 57 +++-
arch/x86/include/asm/cmdline.h | 2 +
arch/x86/include/asm/cpufeatures.h | 4 +
arch/x86/include/asm/desc.h | 2 +-
arch/x86/include/asm/hw_irq.h | 2 +-
arch/x86/include/asm/kaiser.h | 141 +++++++++
arch/x86/include/asm/pgtable.h | 28 +-
arch/x86/include/asm/pgtable_64.h | 25 +-
arch/x86/include/asm/pgtable_types.h | 29 +-
arch/x86/include/asm/processor.h | 2 +-
arch/x86/include/asm/tlbflush.h | 74 ++++-
arch/x86/include/uapi/asm/processor-flags.h | 3 +-
arch/x86/kernel/cpu/common.c | 28 +-
arch/x86/kernel/espfix_64.c | 10 +
arch/x86/kernel/head_64.S | 35 ++-
arch/x86/kernel/irqinit.c | 2 +-
arch/x86/kernel/ldt.c | 25 +-
arch/x86/kernel/paravirt_patch_64.c | 2 -
arch/x86/kernel/process.c | 2 +-
arch/x86/kernel/setup.c | 7 +
arch/x86/kernel/tracepoint.c | 2 +
arch/x86/kvm/x86.c | 3 +-
arch/x86/lib/cmdline.c | 105 +++++++
arch/x86/mm/Makefile | 4 +-
arch/x86/mm/init.c | 2 +-
arch/x86/mm/init_64.c | 10 +
arch/x86/mm/kaiser.c | 454 ++++++++++++++++++++++++++++
arch/x86/mm/kaslr.c | 4 +-
arch/x86/mm/pageattr.c | 63 +++-
arch/x86/mm/pgtable.c | 12 +-
arch/x86/mm/tlb.c | 39 ++-
include/asm-generic/vmlinux.lds.h | 7 +
include/linux/kaiser.h | 52 ++++
include/linux/mmzone.h | 3 +-
include/linux/percpu-defs.h | 32 +-
init/main.c | 2 +
kernel/fork.c | 6 +
mm/vmstat.c | 1 +
net/ipv4/tcp_bbr.c | 5 +
security/Kconfig | 10 +
tools/arch/x86/include/asm/cpufeatures.h | 3 +
46 files changed, 1382 insertions(+), 101 deletions(-)
Powered by blists - more mailing lists