lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <20240814183348.148233-1-pbonzini@redhat.com>
Date: Wed, 14 Aug 2024 14:33:48 -0400
From: Paolo Bonzini <pbonzini@...hat.com>
To: torvalds@...ux-foundation.org
Cc: linux-kernel@...r.kernel.org,
	kvm@...r.kernel.org
Subject: [GIT PULL] KVM changes for Linux 6.11-rc4

Linus,

The following changes since commit 7c626ce4bae1ac14f60076d00eafe71af30450ba:

  Linux 6.11-rc3 (2024-08-11 14:27:14 -0700)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/virt/kvm/kvm.git tags/for-linus

for you to fetch changes up to 1c0e5881691a787a9399a99bff4d56ead6e75e91:

  KVM: SEV: uapi: fix typo in SEV_RET_INVALID_CONFIG (2024-08-14 13:05:42 -0400)

Another largish pull request; this time though it's more the number
of patches than the size, and there's nothing scary in it.

----------------------------------------------------------------
s390:

* Fix failure to start guests with kvm.use_gisa=0

* Panic if (un)share fails to maintain security.

ARM:

* Use kvfree() for the kvmalloc'd nested MMUs array

* Set of fixes to address warnings in W=1 builds

* Make KVM depend on assembler support for ARMv8.4

* Fix for vgic-debug interface for VMs without LPIs

* Actually check ID_AA64MMFR3_EL1.S1PIE in get-reg-list selftest

* Minor code / comment cleanups for configuring PAuth traps

* Take kvm->arch.config_lock to prevent destruction / initialization
  race for a vCPU's CPUIF which may lead to a UAF

x86:

* Disallow read-only memslots for SEV-ES and SEV-SNP (and TDX)

* Fix smatch issues

* Small cleanups

* Make x2APIC ID 100% readonly

* Fix typo in uapi constant

Generic:

* Use synchronize_srcu_expedited() on irqfd shutdown

----------------------------------------------------------------
Amit Shah (1):
      KVM: SEV: uapi: fix typo in SEV_RET_INVALID_CONFIG

Claudio Imbrenda (1):
      s390/uv: Panic for set and remove shared access UVC errors

Dan Carpenter (2):
      KVM: SVM: Fix uninitialized variable bug
      KVM: SVM: Fix an error code in sev_gmem_post_populate()

Danilo Krummrich (1):
      KVM: arm64: free kvm->arch.nested_mmus with kvfree()

Fuad Tabba (1):
      KVM: arm64: Tidying up PAuth code in KVM

Isaku Yamahata (1):
      KVM: x86: Use this_cpu_ptr() instead of per_cpu_ptr(smp_processor_id())

Li RongQing (1):
      KVM: eventfd: Use synchronize_srcu_expedited() on shutdown

Marc Zyngier (2):
      KVM: arm64: Enforce dependency on an ARMv8.4-aware toolchain
      KVM: arm64: vgic: Hold config_lock while tearing down a CPU interface

Mark Brown (1):
      KVM: selftests: arm64: Correct feature test for S1PIE in get-reg-list

Michael Mueller (1):
      KVM: s390: fix validity interception issue when gisa is switched off

Michal Luczaj (1):
      KVM: selftests: Add a testcase to verify x2APIC is fully readonly

Paolo Bonzini (2):
      Merge tag 'kvmarm-fixes-6.11-1' of git://git.kernel.org/pub/scm/linux/kernel/git/kvmarm/kvmarm into HEAD
      Merge tag 'kvm-s390-master-6.11-1' of https://git.kernel.org/pub/scm/linux/kernel/git/kvms390/linux into HEAD

Sean Christopherson (2):
      KVM: x86: Make x2APIC ID 100% readonly
      KVM: x86: Disallow read-only memslots for SEV-ES and SEV-SNP (and TDX)

Sebastian Ott (3):
      KVM: arm64: fix override-init warnings in W=1 builds
      KVM: arm64: fix kdoc warnings in W=1 builds
      KVM: arm64: vgic: fix unexpected unlock sparse warnings

Takahiro Itazuri (1):
      docs: KVM: Fix register ID of SPSR_FIQ

Yue Haibing (1):
      KVM: x86: hyper-v: Remove unused inline function kvm_hv_free_pa_page()

Zenghui Yu (1):
      KVM: arm64: vgic-debug: Exit the iterator properly w/o LPI

 Documentation/virt/kvm/api.rst                     |  2 +-
 arch/arm64/include/asm/kvm_ptrauth.h               |  2 +-
 arch/arm64/kvm/Kconfig                             |  1 +
 arch/arm64/kvm/Makefile                            |  3 +++
 arch/arm64/kvm/arm.c                               | 15 ++++--------
 arch/arm64/kvm/hyp/include/hyp/switch.h            |  1 -
 arch/arm64/kvm/hyp/nvhe/Makefile                   |  2 ++
 arch/arm64/kvm/hyp/nvhe/switch.c                   |  5 ++--
 arch/arm64/kvm/hyp/vhe/Makefile                    |  2 ++
 arch/arm64/kvm/nested.c                            |  2 +-
 arch/arm64/kvm/vgic/vgic-debug.c                   |  5 ++--
 arch/arm64/kvm/vgic/vgic-init.c                    |  3 +--
 arch/arm64/kvm/vgic/vgic-irqfd.c                   |  7 +++---
 arch/arm64/kvm/vgic/vgic-its.c                     | 18 ++++++++------
 arch/arm64/kvm/vgic/vgic-v3.c                      |  2 +-
 arch/arm64/kvm/vgic/vgic.c                         |  2 +-
 arch/arm64/kvm/vgic/vgic.h                         |  2 +-
 arch/s390/include/asm/uv.h                         |  5 +++-
 arch/s390/kvm/kvm-s390.h                           |  7 +++++-
 arch/x86/include/asm/kvm_host.h                    |  2 ++
 arch/x86/kvm/hyperv.h                              |  1 -
 arch/x86/kvm/lapic.c                               | 22 +++++++++++------
 arch/x86/kvm/svm/sev.c                             |  7 +++---
 arch/x86/kvm/x86.c                                 |  6 ++---
 include/linux/kvm_host.h                           |  7 ++++++
 include/uapi/linux/psp-sev.h                       |  1 +
 tools/testing/selftests/kvm/aarch64/get-reg-list.c |  4 ++--
 .../selftests/kvm/x86_64/xapic_state_test.c        | 28 ++++++++++++++++++++++
 virt/kvm/eventfd.c                                 | 13 +++++-----
 virt/kvm/kvm_main.c                                |  5 ++--
 30 files changed, 120 insertions(+), 62 deletions(-)


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ