lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date:   Fri, 22 Jul 2022 11:06:55 +0200
From:   Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To:     linux-kernel@...r.kernel.org
Cc:     Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
        stable@...r.kernel.org, torvalds@...ux-foundation.org,
        akpm@...ux-foundation.org, linux@...ck-us.net, shuah@...nel.org,
        patches@...nelci.org, lkft-triage@...ts.linaro.org, pavel@...x.de,
        jonathanh@...dia.com, f.fainelli@...il.com,
        sudipm.mukherjee@...il.com, slade@...dewatkins.com
Subject: [PATCH 5.18 00/70] 5.18.14-rc1 review

This is the start of the stable review cycle for the 5.18.14 release.
There are 70 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sun, 24 Jul 2022 09:06:00 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.18.14-rc1.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.18.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@...uxfoundation.org>
    Linux 5.18.14-rc1

Peter Zijlstra <peterz@...radead.org>
    um: Add missing apply_returns()

Kim Phillips <kim.phillips@....com>
    x86/bugs: Remove apostrophe typo

Arnaldo Carvalho de Melo <acme@...hat.com>
    tools headers cpufeatures: Sync with the kernel sources

Arnaldo Carvalho de Melo <acme@...hat.com>
    tools arch x86: Sync the msr-index.h copy with the kernel sources

Paolo Bonzini <pbonzini@...hat.com>
    KVM: emulate: do not adjust size of fastop and setcc subroutines

Thadeu Lima de Souza Cascardo <cascardo@...onical.com>
    x86/kvm: fix FASTOP_SIZE when return thunks are enabled

Thadeu Lima de Souza Cascardo <cascardo@...onical.com>
    efi/x86: use naked RET on mixed mode call wrapper

Nathan Chancellor <nathan@...nel.org>
    x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current

Jiri Slaby <jirislaby@...nel.org>
    x86/asm/32: Fix ANNOTATE_UNRET_SAFE use on 32-bit

Thomas Gleixner <tglx@...utronix.de>
    x86/static_call: Serialize __static_call_fixup() properly

Pawan Gupta <pawan.kumar.gupta@...ux.intel.com>
    x86/speculation: Disable RRSBA behavior

Konrad Rzeszutek Wilk <konrad.wilk@...cle.com>
    x86/kexec: Disable RET on kexec

Thadeu Lima de Souza Cascardo <cascardo@...onical.com>
    x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported

Peter Zijlstra <peterz@...radead.org>
    x86/entry: Move PUSH_AND_CLEAR_REGS() back into error_entry

Pawan Gupta <pawan.kumar.gupta@...ux.intel.com>
    x86/bugs: Add Cannon lake to RETBleed affected CPU list

Peter Zijlstra <peterz@...radead.org>
    x86/retbleed: Add fine grained Kconfig knobs

Andrew Cooper <andrew.cooper3@...rix.com>
    x86/cpu/amd: Enumerate BTC_NO

Peter Zijlstra <peterz@...radead.org>
    x86/common: Stamp out the stepping madness

Josh Poimboeuf <jpoimboe@...nel.org>
    KVM: VMX: Prevent RSB underflow before vmenter

Josh Poimboeuf <jpoimboe@...nel.org>
    x86/speculation: Fill RSB on vmexit for IBRS

Josh Poimboeuf <jpoimboe@...nel.org>
    KVM: VMX: Fix IBRS handling after vmexit

Josh Poimboeuf <jpoimboe@...nel.org>
    KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS

Josh Poimboeuf <jpoimboe@...nel.org>
    KVM: VMX: Convert launched argument to flags

Josh Poimboeuf <jpoimboe@...nel.org>
    KVM: VMX: Flatten __vmx_vcpu_run()

Josh Poimboeuf <jpoimboe@...nel.org>
    objtool: Re-add UNWIND_HINT_{SAVE_RESTORE}

Josh Poimboeuf <jpoimboe@...nel.org>
    x86/speculation: Remove x86_spec_ctrl_mask

Josh Poimboeuf <jpoimboe@...nel.org>
    x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit

Josh Poimboeuf <jpoimboe@...nel.org>
    x86/speculation: Fix SPEC_CTRL write on SMT state change

Josh Poimboeuf <jpoimboe@...nel.org>
    x86/speculation: Fix firmware entry SPEC_CTRL handling

Josh Poimboeuf <jpoimboe@...nel.org>
    x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n

Peter Zijlstra <peterz@...radead.org>
    x86/cpu/amd: Add Spectral Chicken

Thadeu Lima de Souza Cascardo <cascardo@...onical.com>
    objtool: Add entry UNRET validation

Josh Poimboeuf <jpoimboe@...nel.org>
    x86/bugs: Do IBPB fallback check only once

Peter Zijlstra <peterz@...radead.org>
    x86/bugs: Add retbleed=ibpb

Peter Zijlstra <peterz@...radead.org>
    x86/xen: Add UNTRAIN_RET

Peter Zijlstra <peterz@...radead.org>
    x86/xen: Rename SYS* entry points

Peter Zijlstra <peterz@...radead.org>
    objtool: Update Retpoline validation

Peter Zijlstra <peterz@...radead.org>
    intel_idle: Disable IBRS during long idle

Peter Zijlstra <peterz@...radead.org>
    x86/bugs: Report Intel retbleed vulnerability

Peter Zijlstra <peterz@...radead.org>
    x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation()

Pawan Gupta <pawan.kumar.gupta@...ux.intel.com>
    x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS

Peter Zijlstra <peterz@...radead.org>
    x86/bugs: Optimize SPEC_CTRL MSR writes

Thadeu Lima de Souza Cascardo <cascardo@...onical.com>
    x86/entry: Add kernel IBRS implementation

Peter Zijlstra <peterz@...radead.org>
    x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value

Kim Phillips <kim.phillips@....com>
    x86/bugs: Enable STIBP for JMP2RET

Alexandre Chartre <alexandre.chartre@...cle.com>
    x86/bugs: Add AMD retbleed= boot parameter

Alexandre Chartre <alexandre.chartre@...cle.com>
    x86/bugs: Report AMD retbleed vulnerability

Thadeu Lima de Souza Cascardo <cascardo@...onical.com>
    x86: Add magic AMD return-thunk

Peter Zijlstra <peterz@...radead.org>
    objtool: Treat .text.__x86.* as noinstr

Peter Zijlstra <peterz@...radead.org>
    x86/entry: Avoid very early RET

Peter Zijlstra <peterz@...radead.org>
    x86: Use return-thunk in asm code

Kim Phillips <kim.phillips@....com>
    x86/sev: Avoid using __x86_return_thunk

Peter Zijlstra <peterz@...radead.org>
    x86/vsyscall_emu/64: Don't use RET in vsyscall emulation

Peter Zijlstra <peterz@...radead.org>
    x86/kvm: Fix SETcc emulation for return thunks

Peter Zijlstra <peterz@...radead.org>
    x86/bpf: Use alternative RET encoding

Peter Zijlstra <peterz@...radead.org>
    x86/ftrace: Use alternative RET encoding

Peter Zijlstra <peterz@...radead.org>
    x86,static_call: Use alternative RET encoding

Thadeu Lima de Souza Cascardo <cascardo@...onical.com>
    objtool: skip non-text sections when adding return-thunk sites

Peter Zijlstra <peterz@...radead.org>
    x86,objtool: Create .return_sites

Peter Zijlstra <peterz@...radead.org>
    x86: Undo return-thunk damage

Peter Zijlstra <peterz@...radead.org>
    x86/retpoline: Use -mfunction-return

Peter Zijlstra <peterz@...radead.org>
    x86/retpoline: Swizzle retpoline thunk

Peter Zijlstra <peterz@...radead.org>
    x86/retpoline: Cleanup some #ifdefery

Peter Zijlstra <peterz@...radead.org>
    x86/cpufeatures: Move RETPOLINE flags to word 11

Peter Zijlstra <peterz@...radead.org>
    x86/kvm/vmx: Make noinstr clean

Peter Zijlstra <peterz@...radead.org>
    x86/entry: Remove skip_r11rcx

Lai Jiangshan <jiangshan.ljs@...group.com>
    x86/entry: Don't call error_entry() for XENPV

Lai Jiangshan <jiangshan.ljs@...group.com>
    x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry()

Lai Jiangshan <jiangshan.ljs@...group.com>
    x86/entry: Switch the stack after error_entry() returns

Lai Jiangshan <jiangshan.ljs@...group.com>
    x86/traps: Use pt_regs directly in fixup_bad_iret()


-------------

Diffstat:

 Documentation/admin-guide/kernel-parameters.txt |  25 ++
 Makefile                                        |   4 +-
 arch/um/kernel/um_arch.c                        |   4 +
 arch/x86/Kconfig                                | 103 +++--
 arch/x86/Makefile                               |   6 +
 arch/x86/entry/Makefile                         |   2 +-
 arch/x86/entry/calling.h                        |  72 +++-
 arch/x86/entry/entry.S                          |  22 ++
 arch/x86/entry/entry_32.S                       |   2 -
 arch/x86/entry/entry_64.S                       |  88 ++++-
 arch/x86/entry/entry_64_compat.S                |  21 +-
 arch/x86/entry/vdso/Makefile                    |   1 +
 arch/x86/entry/vsyscall/vsyscall_emu_64.S       |   9 +-
 arch/x86/include/asm/alternative.h              |   1 +
 arch/x86/include/asm/cpufeatures.h              |  12 +-
 arch/x86/include/asm/disabled-features.h        |  21 +-
 arch/x86/include/asm/linkage.h                  |   8 +
 arch/x86/include/asm/msr-index.h                |  13 +
 arch/x86/include/asm/nospec-branch.h            |  69 +++-
 arch/x86/include/asm/static_call.h              |  19 +-
 arch/x86/include/asm/traps.h                    |   2 +-
 arch/x86/include/asm/unwind_hints.h             |  14 +-
 arch/x86/kernel/alternative.c                   |  69 ++++
 arch/x86/kernel/asm-offsets.c                   |   6 +
 arch/x86/kernel/cpu/amd.c                       |  46 ++-
 arch/x86/kernel/cpu/bugs.c                      | 475 ++++++++++++++++++++----
 arch/x86/kernel/cpu/common.c                    |  61 +--
 arch/x86/kernel/cpu/cpu.h                       |   2 +
 arch/x86/kernel/cpu/hygon.c                     |   6 +
 arch/x86/kernel/cpu/scattered.c                 |   1 +
 arch/x86/kernel/ftrace.c                        |   7 +-
 arch/x86/kernel/head_32.S                       |   1 +
 arch/x86/kernel/head_64.S                       |   5 +
 arch/x86/kernel/module.c                        |   8 +-
 arch/x86/kernel/process.c                       |   2 +-
 arch/x86/kernel/relocate_kernel_32.S            |  25 +-
 arch/x86/kernel/relocate_kernel_64.S            |  23 +-
 arch/x86/kernel/static_call.c                   |  51 ++-
 arch/x86/kernel/traps.c                         |  19 +-
 arch/x86/kernel/vmlinux.lds.S                   |   9 +-
 arch/x86/kvm/emulate.c                          |  35 +-
 arch/x86/kvm/svm/vmenter.S                      |  18 +
 arch/x86/kvm/vmx/capabilities.h                 |   4 +-
 arch/x86/kvm/vmx/nested.c                       |   2 +-
 arch/x86/kvm/vmx/run_flags.h                    |   8 +
 arch/x86/kvm/vmx/vmenter.S                      | 194 ++++++----
 arch/x86/kvm/vmx/vmx.c                          |  84 +++--
 arch/x86/kvm/vmx/vmx.h                          |  10 +-
 arch/x86/kvm/vmx/vmx_ops.h                      |   2 +-
 arch/x86/kvm/x86.c                              |   4 +-
 arch/x86/lib/memmove_64.S                       |   7 +-
 arch/x86/lib/retpoline.S                        |  79 +++-
 arch/x86/mm/mem_encrypt_boot.S                  |  10 +-
 arch/x86/net/bpf_jit_comp.c                     |  26 +-
 arch/x86/platform/efi/efi_thunk_64.S            |   5 +-
 arch/x86/xen/setup.c                            |   6 +-
 arch/x86/xen/xen-asm.S                          |  30 +-
 arch/x86/xen/xen-head.S                         |   1 +
 arch/x86/xen/xen-ops.h                          |   6 +-
 drivers/base/cpu.c                              |   8 +
 drivers/idle/intel_idle.c                       |  44 ++-
 include/linux/cpu.h                             |   2 +
 include/linux/kvm_host.h                        |   2 +-
 include/linux/objtool.h                         |   9 +-
 scripts/Makefile.build                          |   1 +
 scripts/link-vmlinux.sh                         |   3 +
 security/Kconfig                                |  11 -
 tools/arch/x86/include/asm/cpufeatures.h        |  12 +-
 tools/arch/x86/include/asm/disabled-features.h  |  21 +-
 tools/arch/x86/include/asm/msr-index.h          |  13 +
 tools/include/linux/objtool.h                   |   9 +-
 tools/objtool/arch/x86/decode.c                 |   5 +
 tools/objtool/builtin-check.c                   |   4 +-
 tools/objtool/check.c                           | 331 ++++++++++++++++-
 tools/objtool/include/objtool/arch.h            |   1 +
 tools/objtool/include/objtool/builtin.h         |   2 +-
 tools/objtool/include/objtool/check.h           |  24 +-
 tools/objtool/include/objtool/elf.h             |   1 +
 tools/objtool/include/objtool/objtool.h         |   1 +
 tools/objtool/objtool.c                         |   1 +
 80 files changed, 1937 insertions(+), 433 deletions(-)


Powered by blists - more mailing lists