linux-kernel - [GIT PULL] x86/microcode updates for 4.21

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20181223125138.GB26860@zn.tnic>
Date:   Sun, 23 Dec 2018 13:51:38 +0100
From:   Borislav Petkov <bp@...e.de>
To:     Linus Torvalds <torvalds@...ux-foundation.org>
Cc:     x86-ml <x86@...nel.org>, lkml <linux-kernel@...r.kernel.org>
Subject: [GIT PULL] x86/microcode updates for 4.21

Hi Linus,

please pull the latest x86-microcode-for-linus tree from:

  git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git x86-microcode-for-linus


This update contains work started by Maciej to make the microcode
container verification more robust against all kinds of corruption and
also unify verification paths between early and late loading.

The result is a set of verification routines which validate the
microcode blobs before loading it on the CPU. In addition, the code is a
lot more streamlined and unified.

In the process, some of the aspects of patch handling and loading were
simplified.

All provided by Maciej S. Szmigiero and Borislav Petkov.

Thanks,
Boris.

------------------>

The following changes since commit 9ff01193a20d391e8dbce4403dd5ef87c7eaaca6:

  Linux 4.20-rc3 (2018-11-18 13:33:44 -0800)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git x86-microcode-for-linus

for you to fetch changes up to 2ffcbce39ea1e355eed8c6527308624f366f1c58:

  x86/microcode/AMD: Update copyright (2018-11-19 10:55:12 +0100)

----------------------------------------------------------------
Borislav Petkov (11):
      x86/microcode/AMD: Move verify_patch_size() up in the file
      x86/microcode/AMD: Clean up per-family patch size checks
      x86/microcode/AMD: Cleanup verify_patch_size() more
      x86/microcode/AMD: Concentrate patch verification
      x86/microcode/AMD: Simplify patch family detection
      x86/microcode/AMD: Move patch family check to verify_patch()
      x86/microcode/AMD: Move chipset-specific check into verify_patch()
      x86/microcode/AMD: Change verify_patch()'s return value
      x86/microcode/AMD: Convert early parser to the new verification routines
      x86/microcode/AMD: Fix container size's type
      x86/microcode/AMD: Update copyright

Maciej S. Szmigiero (5):
      x86/microcode/AMD: Subtract SECTION_HDR_SIZE from file leftover length
      x86/microcode/AMD: Add microcode container verification
      x86/microcode/AMD: Check microcode container data in the late loader
      x86/microcode/AMD: Convert CPU equivalence table variable into a struct
      x86/microcode/AMD: Check the equivalence table size when scanning it

 arch/x86/kernel/cpu/microcode/amd.c | 470 +++++++++++++++++++++++-------------
 1 file changed, 308 insertions(+), 162 deletions(-)

-- 
Regards/Gruss,
    Boris.

SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg)