linux-kernel - RE: [PATCH v5 00/20] Attack vector controls (part 2)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID:
 <LV3PR12MB926594EF4D386749428033CB9441A@LV3PR12MB9265.namprd12.prod.outlook.com>
Date: Tue, 1 Jul 2025 03:27:55 +0000
From: "Kaplan, David" <David.Kaplan@....com>
To: Borislav Petkov <bp@...en8.de>
CC: Thomas Gleixner <tglx@...utronix.de>, Peter Zijlstra
	<peterz@...radead.org>, Josh Poimboeuf <jpoimboe@...nel.org>, Pawan Gupta
	<pawan.kumar.gupta@...ux.intel.com>, Ingo Molnar <mingo@...hat.com>, Dave
 Hansen <dave.hansen@...ux.intel.com>, "x86@...nel.org" <x86@...nel.org>, "H .
 Peter Anvin" <hpa@...or.com>, "linux-kernel@...r.kernel.org"
	<linux-kernel@...r.kernel.org>
Subject: RE: [PATCH v5 00/20] Attack vector controls (part 2)

[AMD Official Use Only - AMD Internal Distribution Only]

> -----Original Message-----
> From: Borislav Petkov <bp@...en8.de>
> Sent: Monday, June 30, 2025 11:40 AM
> To: Kaplan, David <David.Kaplan@....com>
> Cc: Thomas Gleixner <tglx@...utronix.de>; Peter Zijlstra <peterz@...radead.org>;
> Josh Poimboeuf <jpoimboe@...nel.org>; Pawan Gupta
> <pawan.kumar.gupta@...ux.intel.com>; Ingo Molnar <mingo@...hat.com>; Dave
> Hansen <dave.hansen@...ux.intel.com>; x86@...nel.org; H . Peter Anvin
> <hpa@...or.com>; linux-kernel@...r.kernel.org
> Subject: Re: [PATCH v5 00/20] Attack vector controls (part 2)
>
> Caution: This message originated from an External Source. Use proper caution
> when opening attachments, clicking links, or responding.
>
>
> On Fri, May 09, 2025 at 11:28:19AM -0500, David Kaplan wrote:
> >  .../hw-vuln/attack_vector_controls.rst        | 236 +++++++++++++++
> >  Documentation/admin-guide/hw-vuln/index.rst   |   1 +
> >  .../admin-guide/kernel-parameters.txt         |   4 +
> >  arch/Kconfig                                  |   3 +
> >  arch/x86/Kconfig                              |   1 +
> >  arch/x86/kernel/cpu/bugs.c                    | 278 ++++++++++++++----
> >  arch/x86/mm/pti.c                             |   4 +-
> >  drivers/base/cpu.c                            |  67 +++++
> >  include/linux/cpu.h                           |  21 ++
> >  kernel/cpu.c                                  | 130 +++++++-
> >  10 files changed, 672 insertions(+), 73 deletions(-)
> >  create mode 100644 Documentation/admin-guide/hw-
> vuln/attack_vector_controls.rst
>
> Ok, I replied to one message which is needs more discussing but the rest looks
> ok to me. Feel free to send the next revision once we've resolved this so that
> I can queue it.
>
> Thx.
>

Ack, thanks.  Note that the next revision will also include a new patch for adding attack vector support for ITS, but that should be pretty straightforward.

--David Kaplan