4.4.110-stable review
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest37 patches 108 repliesIn review
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/37 | x86/boot: Add early cmdline parsing for options with argumentsarch/ arch/ | +107 | 0 replies | |
| 2/37 | KAISER: Kernel Address Isolationarch/ arch/ arch/ +19 more | +449 | 0 replies | |
| 3/37 | kaiser: merged updatearch/ arch/ arch/ +12 more | +553 | 0 replies | |
| 4/37 | kaiser: do not set _PAGE_NX on pgd_nonearch/ arch/ arch/ | +56 | 0 replies | |
| 5/37 | kaiser: stack map PAGE_SIZE at THREAD_SIZE-PAGE_SIZEinclude/ init/ kernel/ | +36 | 0 replies | |
| 6/37 | kaiser: fix build and FIXME in alloc_ldt_struct()arch/ | +4 | 0 replies | |
| 7/37 | kaiser: KAISER depends on SMPsecurity/ | +6 | 0 replies | |
| 8/37 | kaiser: fix regs to do_nmi() ifndef CONFIG_KAISERarch/ | +6 | 0 replies | |
| 9/37 | kaiser: fix perf crashesarch/ | +45 | 0 replies | |
| 10/37 | kaiser: ENOMEM if kaiser_pagetable_walk() NULLarch/ | +7 | 0 replies | |
| 11/37 | kaiser: tidied up asm/kaiser.h somewhatarch/ | +13 | 0 replies | |
| 12/37 | kaiser: tidied up kaiser_add/remove_mapping slightlyarch/ | +3 | 0 replies | |
| 13/37 | kaiser: kaiser_remove_mapping() move along the pgdarch/ | +6 | 0 replies | |
| 14/37 | kaiser: cleanups while trying for gold linkarch/ arch/ include/ +1 more | +21 | 0 replies | |
| 15/37 | kaiser: name that 0x1000 KAISER_SHADOW_PGD_OFFSETarch/ arch/ | +7 | 0 replies | |
| 16/37 | kaiser: delete KAISER_REAL_SWITCH optionarch/ arch/ security/ | +0 | 0 replies | |
| 17/37 | kaiser: vmstat show NR_KAISERTABLE as nr_overheadarch/ include/ mm/ | +14 | 0 replies | |
| 18/37 | kaiser: enhanced by kernel and user PCIDsarch/ arch/ arch/ +8 more | +182 | 0 replies | |
| 19/37 | kaiser: load_new_mm_cr3() let SWITCH_USER_CR3 flush userarch/ arch/ arch/ +2 more | +114 | 0 replies | |
| 20/37 | kaiser: PCID 0 for kernel and 128 for userarch/ arch/ arch/ | +19 | 0 replies | |
| 21/37 | kaiser: x86_cr3_pcid_noflush and x86_cr3_pcid_userarch/ arch/ arch/ | +16 | 0 replies | |
| 22/37 | kaiser: paranoid_entry pass cr3 need to paranoid_exitarch/ arch/ | +36 | 0 replies | |
| 23/37 | kaiser: _pgd_alloc() without __GFP_REPEAT to avoid stallsarch/ | +4 | 0 replies | |
| 24/37 | kaiser: fix unlikely error in alloc_ldt_struct()arch/ | +1 | 0 replies | |
| 25/37 | kaiser: add "nokaiser" boot option, using ALTERNATIVEDocumentation/ arch/ arch/ +13 more | +143 | 0 replies | |
| 26/37 | x86/kaiser: Rename and simplify X86_FEATURE_KAISER handlingDocumentation/ arch/ arch/ | +20 | 0 replies | |
| 27/37 | x86/kaiser: Check boottime cmdline paramsDocumentation/ arch/ | +47 | 0 replies | |
| 28/37 | kaiser: use ALTERNATIVE instead of x86_cr3_pcid_noflusharch/ arch/ arch/ | +8 | 0 replies | |
| 29/37 | kaiser: drop is_atomic arg to kaiser_pagetable_walk()arch/ | +2 | 0 replies | |
| 30/37 | kaiser: asm/tlbflush.h handle noPGE at lower levelarch/ | +3 | 0 replies | |
| 31/37 | kaiser: kaiser_flush_tlb_on_return_to_user() check PCIDarch/ arch/ arch/ | +9 | 0 replies | |
| 32/37 | x86/paravirt: Dont patch flush_tlb_singlearch/ | +0 | 0 replies | |
| 33/37 | x86/kaiser: Reenable PARAVIRTsecurity/ | +1 | 0 replies | |
| 34/37 | kaiser: disabled on Xen PVarch/ | +5 | 0 replies | |
| 35/37 | x86/kaiser: Move feature detection uparch/ arch/ arch/ | +9 | 0 replies | |
| 36/37 | KPTI: Rename to PAGE_TABLE_ISOLATIONarch/ arch/ arch/ +11 more | +29 | 0 replies | |
| 37/37 | KPTI: Report when enabledarch/ | +6 | 0 replies |
Reviews trailers per patch
30 of 37 patches have a Reviewed-by or Acked-by of their own; the series has one for all of them.
| Patch | Thomas Gleixner | Jiri Kosina | Josh Poimboeuf | Juergen Gross | Peter Zijlstra | Borislav Petkov | Naresh Kamboju | Steven Sistare |
|---|---|---|---|---|---|---|---|---|
| Series | T-b | R-b | ||||||
| 1/37 | R-b | |||||||
| 2/37 | A-b | |||||||
| 3/37 | A-b | |||||||
| 4/37 | A-b | |||||||
| 5/37 | A-b | |||||||
| 6/37 | A-b | |||||||
| 7/37 | A-b | |||||||
| 8/37 | A-b | |||||||
| 9/37 | A-b | |||||||
| 10/37 | A-b | |||||||
| 11/37 | A-b | |||||||
| 12/37 | A-b | |||||||
| 13/37 | A-b | |||||||
| 14/37 | A-b | |||||||
| 15/37 | A-b | |||||||
| 16/37 | A-b | |||||||
| 17/37 | A-b | |||||||
| 18/37 | A-b | |||||||
| 19/37 | A-b | |||||||
| 20/37 | A-b | |||||||
| 21/37 | A-b | |||||||
| 22/37 | A-b | |||||||
| 23/37 | A-b | |||||||
| 24/37 | A-b | |||||||
| 25/37 | A-b | |||||||
| 26/37 | ||||||||
| 27/37 | ||||||||
| 28/37 | A-b | |||||||
| 29/37 | A-b | |||||||
| 30/37 | A-b | |||||||
| 31/37 | A-b | |||||||
| 32/37 | R-b | R-b | A-b | A-b | ||||
| 33/37 | ||||||||
| 34/37 | ||||||||
| 35/37 | ||||||||
| 36/37 | ||||||||
| 37/37 |
Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 8 reviewers.
Cover letter [PATCH 4.4 00/37] 4.4.110-stable review
This is the start of the stable review cycle for the 4.4.110 release. There are 37 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.
Responses should be made by Fri Jan 5 19:50:38 UTC 2018. Anything received after that time might be too late.
The whole patch series can be found in one patch at:
kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.110-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <[email protected]>
Linux 4.4.110-rc1
Kees Cook <[email protected]>
KPTI: Report when enabled
Kees Cook <[email protected]>
KPTI: Rename to PAGE_TABLE_ISOLATION
Borislav Petkov <[email protected]>
x86/kaiser: Move feature detection up
Jiri Kosina <[email protected]>
kaiser: disabled on Xen PV
Borislav Petkov <[email protected]>
x86/kaiser: Reenable PARAVIRT
Thomas Gleixner <[email protected]>
x86/paravirt: Dont patch flush_tlb_single
Hugh Dickins <[email protected]>
kaiser: kaiser_flush_tlb_on_return_to_user() check PCID
Hugh Dickins <[email protected]>
kaiser: asm/tlbflush.h handle noPGE at lower level
Hugh Dickins <[email protected]>
kaiser: drop is_atomic arg to kaiser_pagetable_walk()
Hugh Dickins <[email protected]>
kaiser: use ALTERNATIVE instead of x86_cr3_pcid_noflush
Borislav Petkov <[email protected]>
x86/kaiser: Check boottime cmdline params
Borislav Petkov <[email protected]>
x86/kaiser: Rename and simplify X86_FEATURE_KAISER handling
Hugh Dickins <[email protected]>
kaiser: add "nokaiser" boot option, using ALTERNATIVE
Hugh Dickins <[email protected]>
kaiser: fix unlikely error in alloc_ldt_struct()
Hugh Dickins <[email protected]>
kaiser: _pgd_alloc() without __GFP_REPEAT to avoid stalls
Hugh Dickins <[email protected]>
kaiser: paranoid_entry pass cr3 need to paranoid_exit
Hugh Dickins <[email protected]>
kaiser: x86_cr3_pcid_noflush and x86_cr3_pcid_user
Hugh Dickins <[email protected]>
kaiser: PCID 0 for kernel and 128 for user
Hugh Dickins <[email protected]>
kaiser: load_new_mm_cr3() let SWITCH_USER_CR3 flush user
Dave Hansen <[email protected]>
kaiser: enhanced by kernel and user PCIDs
Hugh Dickins <[email protected]>
kaiser: vmstat show NR_KAISERTABLE as nr_overhead
Hugh Dickins <[email protected]>
kaiser: delete KAISER_REAL_SWITCH option
Hugh Dickins <[email protected]>
kaiser: name that 0x1000 KAISER_SHADOW_PGD_OFFSET
Hugh Dickins <[email protected]>
kaiser: cleanups while trying for gold link
Hugh Dickins <[email protected]>
kaiser: kaiser_remove_mapping() move along the pgd
Hugh Dickins <[email protected]>
kaiser: tidied up kaiser_add/remove_mapping slightly
Hugh Dickins <[email protected]>
kaiser: tidied up asm/kaiser.h somewhat
Hugh Dickins <[email protected]>
kaiser: ENOMEM if kaiser_pagetable_walk() NULL
Hugh Dickins <[email protected]>
kaiser: fix perf crashes
Hugh Dickins <[email protected]>
kaiser: fix regs to do_nmi() ifndef CONFIG_KAISER
Hugh Dickins <[email protected]>
kaiser: KAISER depends on SMP
Hugh Dickins <[email protected]>
kaiser: fix build and FIXME in alloc_ldt_struct()
Hugh Dickins <[email protected]>
kaiser: stack map PAGE_SIZE at THREAD_SIZE-PAGE_SIZE
Hugh Dickins <[email protected]>
kaiser: do not set _PAGE_NX on pgd_none
Dave Hansen <[email protected]>
kaiser: merged update
Richard Fellner <[email protected]>
KAISER: Kernel Address Isolation
Tom Lendacky <[email protected]>
x86/boot: Add early cmdline parsing for options with arguments
-------------
Diffstat:
Documentation/kernel-parameters.txt | 8 + Makefile | 4 +- arch/x86/boot/compressed/misc.h | 1 + arch/x86/entry/entry_64.S | 164 ++++++++-- arch/x86/entry/entry_64_compat.S | 7 + arch/x86/include/asm/cmdline.h | 2 + arch/x86/include/asm/cpufeature.h | 4 + arch/x86/include/asm/desc.h | 2 +- arch/x86/include/asm/hw_irq.h | 2 +- arch/x86/include/asm/kaiser.h | 141 +++++++++ arch/x86/include/asm/pgtable.h | 28 +- arch/x86/include/asm/pgtable_64.h | 25 +- arch/x86/include/asm/pgtable_types.h | 29 +- arch/x86/include/asm/processor.h | 2 +- arch/x86/include/asm/tlbflush.h | 74 ++++- arch/x86/include/uapi/asm/processor-flags.h | 3 +- arch/x86/kernel/cpu/common.c | 28 +- arch/x86/kernel/cpu/perf_event_intel_ds.c | 57 +++- arch/x86/kernel/espfix_64.c | 10 + arch/x86/kernel/head_64.S | 35 ++- arch/x86/kernel/irqinit.c | 2 +- arch/x86/kernel/ldt.c | 25 +- arch/x86/kernel/paravirt_patch_64.c | 2 - arch/x86/kernel/process.c | 2 +- arch/x86/kernel/setup.c | 7 + arch/x86/kernel/tracepoint.c | 2 + arch/x86/kvm/x86.c | 3 +- arch/x86/lib/cmdline.c | 105 +++++++ arch/x86/mm/Makefile | 1 + arch/x86/mm/init.c | 2 +- arch/x86/mm/init_64.c | 10 + arch/x86/mm/kaiser.c | 455 ++++++++++++++++++++++++++++ arch/x86/mm/pageattr.c | 63 +++- arch/x86/mm/pgtable.c | 16 +- arch/x86/mm/tlb.c | 39 ++- include/asm-generic/vmlinux.lds.h | 7 + include/linux/kaiser.h | 52 ++++ include/linux/mmzone.h | 3 +- include/linux/percpu-defs.h | 32 +- init/main.c | 2 + kernel/fork.c | 6 + mm/vmstat.c | 1 + security/Kconfig | 10 + 43 files changed, 1375 insertions(+), 98 deletions(-)