lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-Id: <165857485548182@kroah.com>
Date:   Sat, 23 Jul 2022 13:14:14 +0200
From:   Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To:     linux-kernel@...r.kernel.org, akpm@...ux-foundation.org,
        torvalds@...ux-foundation.org, stable@...r.kernel.org
Cc:     lwn@....net, jslaby@...e.cz,
        Greg Kroah-Hartman <gregkh@...uxfoundation.org>
Subject: Linux 5.18.14

I'm announcing the release of the 5.18.14 kernel.

All users of the 5.18 kernel series must upgrade.

The updated 5.18.y git tree can be found at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.18.y
and can be browsed at the normal kernel.org git web browser:
	https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary

thanks,

greg k-h

------------

 Documentation/admin-guide/kernel-parameters.txt |   25 +
 Makefile                                        |    2 
 arch/um/kernel/um_arch.c                        |    4 
 arch/x86/Kconfig                                |  103 ++++-
 arch/x86/Makefile                               |    6 
 arch/x86/entry/Makefile                         |    2 
 arch/x86/entry/calling.h                        |   72 +++
 arch/x86/entry/entry.S                          |   22 +
 arch/x86/entry/entry_32.S                       |    2 
 arch/x86/entry/entry_64.S                       |   88 +++-
 arch/x86/entry/entry_64_compat.S                |   21 -
 arch/x86/entry/vdso/Makefile                    |    1 
 arch/x86/entry/vsyscall/vsyscall_emu_64.S       |    9 
 arch/x86/include/asm/alternative.h              |    1 
 arch/x86/include/asm/cpufeatures.h              |   12 
 arch/x86/include/asm/disabled-features.h        |   21 +
 arch/x86/include/asm/linkage.h                  |    8 
 arch/x86/include/asm/msr-index.h                |   13 
 arch/x86/include/asm/nospec-branch.h            |   69 ++-
 arch/x86/include/asm/static_call.h              |   19 
 arch/x86/include/asm/traps.h                    |    2 
 arch/x86/include/asm/unwind_hints.h             |   14 
 arch/x86/kernel/alternative.c                   |   69 +++
 arch/x86/kernel/asm-offsets.c                   |    6 
 arch/x86/kernel/cpu/amd.c                       |   46 +-
 arch/x86/kernel/cpu/bugs.c                      |  475 ++++++++++++++++++++----
 arch/x86/kernel/cpu/common.c                    |   61 +--
 arch/x86/kernel/cpu/cpu.h                       |    2 
 arch/x86/kernel/cpu/hygon.c                     |    6 
 arch/x86/kernel/cpu/scattered.c                 |    1 
 arch/x86/kernel/ftrace.c                        |    7 
 arch/x86/kernel/head_32.S                       |    1 
 arch/x86/kernel/head_64.S                       |    5 
 arch/x86/kernel/module.c                        |    8 
 arch/x86/kernel/process.c                       |    2 
 arch/x86/kernel/relocate_kernel_32.S            |   25 -
 arch/x86/kernel/relocate_kernel_64.S            |   23 -
 arch/x86/kernel/static_call.c                   |   51 ++
 arch/x86/kernel/traps.c                         |   19 
 arch/x86/kernel/vmlinux.lds.S                   |    9 
 arch/x86/kvm/emulate.c                          |   35 -
 arch/x86/kvm/svm/vmenter.S                      |   18 
 arch/x86/kvm/vmx/capabilities.h                 |    4 
 arch/x86/kvm/vmx/nested.c                       |    2 
 arch/x86/kvm/vmx/run_flags.h                    |    8 
 arch/x86/kvm/vmx/vmenter.S                      |  194 +++++----
 arch/x86/kvm/vmx/vmx.c                          |   84 ++--
 arch/x86/kvm/vmx/vmx.h                          |   10 
 arch/x86/kvm/vmx/vmx_ops.h                      |    2 
 arch/x86/kvm/x86.c                              |    4 
 arch/x86/lib/memmove_64.S                       |    7 
 arch/x86/lib/retpoline.S                        |   79 +++
 arch/x86/mm/mem_encrypt_boot.S                  |   10 
 arch/x86/net/bpf_jit_comp.c                     |   26 +
 arch/x86/platform/efi/efi_thunk_64.S            |    5 
 arch/x86/xen/setup.c                            |    6 
 arch/x86/xen/xen-asm.S                          |   30 -
 arch/x86/xen/xen-head.S                         |    1 
 arch/x86/xen/xen-ops.h                          |    6 
 drivers/base/cpu.c                              |    8 
 drivers/idle/intel_idle.c                       |   44 +-
 include/linux/cpu.h                             |    2 
 include/linux/kvm_host.h                        |    2 
 include/linux/objtool.h                         |    9 
 scripts/Makefile.build                          |    1 
 scripts/link-vmlinux.sh                         |    3 
 security/Kconfig                                |   11 
 tools/arch/x86/include/asm/cpufeatures.h        |   12 
 tools/arch/x86/include/asm/disabled-features.h  |   21 +
 tools/arch/x86/include/asm/msr-index.h          |   13 
 tools/include/linux/objtool.h                   |    9 
 tools/objtool/arch/x86/decode.c                 |    5 
 tools/objtool/builtin-check.c                   |    4 
 tools/objtool/check.c                           |  331 ++++++++++++++++
 tools/objtool/include/objtool/arch.h            |    1 
 tools/objtool/include/objtool/builtin.h         |    2 
 tools/objtool/include/objtool/check.h           |   24 -
 tools/objtool/include/objtool/elf.h             |    1 
 tools/objtool/include/objtool/objtool.h         |    1 
 tools/objtool/objtool.c                         |    1 
 80 files changed, 1936 insertions(+), 432 deletions(-)

Alexandre Chartre (2):
      x86/bugs: Report AMD retbleed vulnerability
      x86/bugs: Add AMD retbleed= boot parameter

Andrew Cooper (1):
      x86/cpu/amd: Enumerate BTC_NO

Arnaldo Carvalho de Melo (2):
      tools arch x86: Sync the msr-index.h copy with the kernel sources
      tools headers cpufeatures: Sync with the kernel sources

Greg Kroah-Hartman (1):
      Linux 5.18.14

Jiri Slaby (1):
      x86/asm/32: Fix ANNOTATE_UNRET_SAFE use on 32-bit

Josh Poimboeuf (13):
      x86/bugs: Do IBPB fallback check only once
      x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n
      x86/speculation: Fix firmware entry SPEC_CTRL handling
      x86/speculation: Fix SPEC_CTRL write on SMT state change
      x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit
      x86/speculation: Remove x86_spec_ctrl_mask
      objtool: Re-add UNWIND_HINT_{SAVE_RESTORE}
      KVM: VMX: Flatten __vmx_vcpu_run()
      KVM: VMX: Convert launched argument to flags
      KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS
      KVM: VMX: Fix IBRS handling after vmexit
      x86/speculation: Fill RSB on vmexit for IBRS
      KVM: VMX: Prevent RSB underflow before vmenter

Kim Phillips (3):
      x86/sev: Avoid using __x86_return_thunk
      x86/bugs: Enable STIBP for JMP2RET
      x86/bugs: Remove apostrophe typo

Konrad Rzeszutek Wilk (1):
      x86/kexec: Disable RET on kexec

Lai Jiangshan (4):
      x86/traps: Use pt_regs directly in fixup_bad_iret()
      x86/entry: Switch the stack after error_entry() returns
      x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry()
      x86/entry: Don't call error_entry() for XENPV

Nathan Chancellor (1):
      x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current

Paolo Bonzini (1):
      KVM: emulate: do not adjust size of fastop and setcc subroutines

Pawan Gupta (3):
      x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS
      x86/bugs: Add Cannon lake to RETBleed affected CPU list
      x86/speculation: Disable RRSBA behavior

Peter Zijlstra (30):
      x86/entry: Remove skip_r11rcx
      x86/kvm/vmx: Make noinstr clean
      x86/cpufeatures: Move RETPOLINE flags to word 11
      x86/retpoline: Cleanup some #ifdefery
      x86/retpoline: Swizzle retpoline thunk
      x86/retpoline: Use -mfunction-return
      x86: Undo return-thunk damage
      x86,objtool: Create .return_sites
      x86,static_call: Use alternative RET encoding
      x86/ftrace: Use alternative RET encoding
      x86/bpf: Use alternative RET encoding
      x86/kvm: Fix SETcc emulation for return thunks
      x86/vsyscall_emu/64: Don't use RET in vsyscall emulation
      x86: Use return-thunk in asm code
      x86/entry: Avoid very early RET
      objtool: Treat .text.__x86.* as noinstr
      x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value
      x86/bugs: Optimize SPEC_CTRL MSR writes
      x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation()
      x86/bugs: Report Intel retbleed vulnerability
      intel_idle: Disable IBRS during long idle
      objtool: Update Retpoline validation
      x86/xen: Rename SYS* entry points
      x86/xen: Add UNTRAIN_RET
      x86/bugs: Add retbleed=ibpb
      x86/cpu/amd: Add Spectral Chicken
      x86/common: Stamp out the stepping madness
      x86/retbleed: Add fine grained Kconfig knobs
      x86/entry: Move PUSH_AND_CLEAR_REGS() back into error_entry
      um: Add missing apply_returns()

Thadeu Lima de Souza Cascardo (7):
      objtool: skip non-text sections when adding return-thunk sites
      x86: Add magic AMD return-thunk
      x86/entry: Add kernel IBRS implementation
      objtool: Add entry UNRET validation
      x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported
      efi/x86: use naked RET on mixed mode call wrapper
      x86/kvm: fix FASTOP_SIZE when return thunks are enabled

Thomas Gleixner (1):
      x86/static_call: Serialize __static_call_fixup() properly

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ