linux-kernel - Re: [PATCH 4.4 29/63] x86/mm: Disable PCID on 32-bit kernels

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <1515521895.22302.60.camel@infradead.org>
Date:   Tue, 09 Jan 2018 18:18:15 +0000
From:   David Woodhouse <dwmw2@...radead.org>
To:     Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
        linux-kernel@...r.kernel.org,
        "Ghitulete, Razvan-alin" <rga@...zon.com>
Cc:     stable@...r.kernel.org, Andy Lutomirski <luto@...nel.org>,
        Nadav Amit <nadav.amit@...il.com>,
        Borislav Petkov <bp@...e.de>,
        Thomas Gleixner <tglx@...utronix.de>,
        Andrew Morton <akpm@...ux-foundation.org>,
        Arjan van de Ven <arjan@...ux.intel.com>,
        Borislav Petkov <bp@...en8.de>,
        Dave Hansen <dave.hansen@...el.com>,
        Linus Torvalds <torvalds@...ux-foundation.org>,
        Mel Gorman <mgorman@...e.de>,
        Peter Zijlstra <peterz@...radead.org>,
        Rik van Riel <riel@...hat.com>, linux-mm@...ck.org,
        Ingo Molnar <mingo@...nel.org>, Hugh Dickins <hughd@...gle.com>
Subject: Re: [PATCH 4.4 29/63] x86/mm: Disable PCID on 32-bit kernels

On Tue, 2018-01-09 at 16:05 +0000, David Woodhouse wrote:
> 
> 
> Razvan points out that the #ifdef there is redundant; in older kernels,
> bugs.c is only built on 32-bit anyway.
> 
> We're working on backporting the other CPU_BUG_* and sysfs
> vulnerabilities bits to 4.9 (first), and will probably end up
> cherry-picking 62a67e123e ("x86/cpu: Merge bugs.c and bugs_64.c").

s/will probably end up/ended up/

:/sys/devices/system/cpu/vulnerabilities# cat spectre_v2 
Mitigation: Full AMD retpoline
:/sys/devices/system/cpu/vulnerabilities# uname -a
Linux localhost 4.9.76-rc1+ #2 SMP Tue Jan 9 17:37:55 GMT 2018 x86_64 x86_64 x86_64 GNU/Linux

http://git.infradead.org/users/rga/retpoline-stable.git/shortlog/refs/heads/linux-4.9.y
passes basic smoke testing so far; will audit it and check for
additional indirect branches which didn't exist in 4.14, tomorrow. And
continue to 4.4 and 3.2 kernels too.

We will also backport the IBRS patches on top, once they're ready.

What we *haven't* included is PTI-specific changes, like (to pick a
random example) the tboot one.
Download attachment "smime.p7s" of type "application/x-pkcs7-signature" (5213 bytes)