Skip to content

4.4.110-stable review

Greg Kroah-Hartman kernel-hardening kvm linux-arch linux-efi linux-mm lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest37 patches 108 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/37x86/boot: Add early cmdline parsing for options with argumentsarch/x86/include/asm/cmdline.h arch/x86/lib/cmdline.c+107 -00 replies
2/37KAISER: Kernel Address Isolationarch/x86/entry/entry_64.S arch/x86/entry/entry_64_compat.S arch/x86/include/asm/hw_irq.h +19 more+449 -160 replies
3/37kaiser: merged updatearch/x86/entry/entry_64.S arch/x86/include/asm/kaiser.h arch/x86/include/asm/pgtable.h +12 more+553 -1900 replies
4/37kaiser: do not set _PAGE_NX on pgd_nonearch/x86/boot/compressed/misc.h arch/x86/include/asm/pgtable_64.h arch/x86/mm/kaiser.c+56 -380 replies
5/37kaiser: stack map PAGE_SIZE at THREAD_SIZE-PAGE_SIZEinclude/linux/kaiser.h init/main.c kernel/fork.c+36 -170 replies
6/37kaiser: fix build and FIXME in alloc_ldt_struct()arch/x86/kernel/ldt.c+4 -60 replies
7/37kaiser: KAISER depends on SMPsecurity/Kconfig+6 -40 replies
8/37kaiser: fix regs to do_nmi() ifndef CONFIG_KAISERarch/x86/entry/entry_64.S+6 -50 replies
9/37kaiser: fix perf crashesarch/x86/kernel/cpu/perf_event_intel_ds.c+45 -120 replies
10/37kaiser: ENOMEM if kaiser_pagetable_walk() NULLarch/x86/mm/kaiser.c+7 -30 replies
11/37kaiser: tidied up asm/kaiser.h somewhatarch/x86/include/asm/kaiser.h+13 -190 replies
12/37kaiser: tidied up kaiser_add/remove_mapping slightlyarch/x86/mm/kaiser.c+3 -60 replies
13/37kaiser: kaiser_remove_mapping() move along the pgdarch/x86/mm/kaiser.c+6 -40 replies
14/37kaiser: cleanups while trying for gold linkarch/x86/include/asm/desc.h arch/x86/include/asm/processor.h include/asm-generic/vmlinux.lds.h +1 more+21 -280 replies
15/37kaiser: name that 0x1000 KAISER_SHADOW_PGD_OFFSETarch/x86/entry/entry_64.S arch/x86/include/asm/kaiser.h+7 -40 replies
16/37kaiser: delete KAISER_REAL_SWITCH optionarch/x86/entry/entry_64.S arch/x86/include/asm/kaiser.h security/Kconfig+0 -120 replies
17/37kaiser: vmstat show NR_KAISERTABLE as nr_overheadarch/x86/mm/kaiser.c include/linux/mmzone.h mm/vmstat.c+14 -60 replies
18/37kaiser: enhanced by kernel and user PCIDsarch/x86/entry/entry_64.S arch/x86/entry/entry_64_compat.S arch/x86/include/asm/cpufeature.h +8 more+182 -180 replies
19/37kaiser: load_new_mm_cr3() let SWITCH_USER_CR3 flush userarch/x86/include/asm/kaiser.h arch/x86/include/asm/tlbflush.h arch/x86/kernel/cpu/common.c +2 more+114 -800 replies
20/37kaiser: PCID 0 for kernel and 128 for userarch/x86/include/asm/kaiser.h arch/x86/include/asm/pgtable_types.h arch/x86/mm/tlb.c+19 -100 replies
21/37kaiser: x86_cr3_pcid_noflush and x86_cr3_pcid_userarch/x86/entry/entry_64.S arch/x86/include/asm/kaiser.h arch/x86/mm/kaiser.c+16 -160 replies
22/37kaiser: paranoid_entry pass cr3 need to paranoid_exitarch/x86/entry/entry_64.S arch/x86/include/asm/kaiser.h+36 -180 replies
23/37kaiser: _pgd_alloc() without __GFP_REPEAT to avoid stallsarch/x86/mm/pgtable.c+4 -20 replies
24/37kaiser: fix unlikely error in alloc_ldt_struct()arch/x86/kernel/ldt.c+1 -10 replies
25/37kaiser: add "nokaiser" boot option, using ALTERNATIVEDocumentation/kernel-parameters.txt arch/x86/entry/entry_64.S arch/x86/include/asm/cpufeature.h +13 more+143 -650 replies
26/37x86/kaiser: Rename and simplify X86_FEATURE_KAISER handlingDocumentation/kernel-parameters.txt arch/x86/kernel/cpu/common.c arch/x86/mm/kaiser.c+20 -200 replies
27/37x86/kaiser: Check boottime cmdline paramsDocumentation/kernel-parameters.txt arch/x86/mm/kaiser.c+47 -180 replies
28/37kaiser: use ALTERNATIVE instead of x86_cr3_pcid_noflusharch/x86/entry/entry_64.S arch/x86/include/asm/kaiser.h arch/x86/mm/kaiser.c+8 -160 replies
29/37kaiser: drop is_atomic arg to kaiser_pagetable_walk()arch/x86/mm/kaiser.c+2 -80 replies
30/37kaiser: asm/tlbflush.h handle noPGE at lower levelarch/x86/include/asm/tlbflush.h+3 -240 replies
31/37kaiser: kaiser_flush_tlb_on_return_to_user() check PCIDarch/x86/include/asm/tlbflush.h arch/x86/mm/kaiser.c arch/x86/mm/tlb.c+9 -90 replies
32/37x86/paravirt: Dont patch flush_tlb_singlearch/x86/kernel/paravirt_patch_64.c+0 -20 replies
33/37x86/kaiser: Reenable PARAVIRTsecurity/Kconfig+1 -10 replies
34/37kaiser: disabled on Xen PVarch/x86/mm/kaiser.c+5 -00 replies
35/37x86/kaiser: Move feature detection uparch/x86/include/asm/kaiser.h arch/x86/kernel/setup.c arch/x86/mm/kaiser.c+9 -20 replies
36/37KPTI: Rename to PAGE_TABLE_ISOLATIONarch/x86/boot/compressed/misc.h arch/x86/entry/entry_64.S arch/x86/include/asm/cpufeature.h +11 more+29 -290 replies
37/37KPTI: Report when enabledarch/x86/mm/kaiser.c+6 -10 replies

Reviews trailers per patch

30 of 37 patches have a Reviewed-by or Acked-by of their own; the series has one for all of them.

PatchThomas GleixnerJiri KosinaJosh PoimboeufJuergen GrossPeter ZijlstraBorislav PetkovNaresh KambojuSteven Sistare
SeriesT-b R-b
1/37R-b
2/37A-b
3/37A-b
4/37A-b
5/37A-b
6/37A-b
7/37A-b
8/37A-b
9/37A-b
10/37A-b
11/37A-b
12/37A-b
13/37A-b
14/37A-b
15/37A-b
16/37A-b
17/37A-b
18/37A-b
19/37A-b
20/37A-b
21/37A-b
22/37A-b
23/37A-b
24/37A-b
25/37A-b
26/37
27/37
28/37A-b
29/37A-b
30/37A-b
31/37A-b
32/37R-b R-b A-b A-b
33/37
34/37
35/37
36/37
37/37

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 8 reviewers.

Read the v1 thread

Cover letter [PATCH 4.4 00/37] 4.4.110-stable review

This is the start of the stable review cycle for the 4.4.110 release. There are 37 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Fri Jan 5 19:50:38 UTC 2018. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.110-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 4.4.110-rc1

Kees Cook <[email protected]>
KPTI: Report when enabled

Kees Cook <[email protected]>
KPTI: Rename to PAGE_TABLE_ISOLATION

Borislav Petkov <[email protected]>
x86/kaiser: Move feature detection up

Jiri Kosina <[email protected]>
kaiser: disabled on Xen PV

Borislav Petkov <[email protected]>
x86/kaiser: Reenable PARAVIRT

Thomas Gleixner <[email protected]>
x86/paravirt: Dont patch flush_tlb_single

Hugh Dickins <[email protected]>
kaiser: kaiser_flush_tlb_on_return_to_user() check PCID

Hugh Dickins <[email protected]>
kaiser: asm/tlbflush.h handle noPGE at lower level

Hugh Dickins <[email protected]>
kaiser: drop is_atomic arg to kaiser_pagetable_walk()

Hugh Dickins <[email protected]>
kaiser: use ALTERNATIVE instead of x86_cr3_pcid_noflush

Borislav Petkov <[email protected]>
x86/kaiser: Check boottime cmdline params

Borislav Petkov <[email protected]>
x86/kaiser: Rename and simplify X86_FEATURE_KAISER handling

Hugh Dickins <[email protected]>
kaiser: add "nokaiser" boot option, using ALTERNATIVE

Hugh Dickins <[email protected]>
kaiser: fix unlikely error in alloc_ldt_struct()

Hugh Dickins <[email protected]>
kaiser: _pgd_alloc() without __GFP_REPEAT to avoid stalls

Hugh Dickins <[email protected]>
kaiser: paranoid_entry pass cr3 need to paranoid_exit

Hugh Dickins <[email protected]>

    kaiser: x86_cr3_pcid_noflush and x86_cr3_pcid_user

Hugh Dickins <[email protected]>
kaiser: PCID 0 for kernel and 128 for user

Hugh Dickins <[email protected]>
kaiser: load_new_mm_cr3() let SWITCH_USER_CR3 flush user

Dave Hansen <[email protected]>
kaiser: enhanced by kernel and user PCIDs

Hugh Dickins <[email protected]>
kaiser: vmstat show NR_KAISERTABLE as nr_overhead

Hugh Dickins <[email protected]>
kaiser: delete KAISER_REAL_SWITCH option

Hugh Dickins <[email protected]>

    kaiser: name that 0x1000 KAISER_SHADOW_PGD_OFFSET

Hugh Dickins <[email protected]>
kaiser: cleanups while trying for gold link

Hugh Dickins <[email protected]>
kaiser: kaiser_remove_mapping() move along the pgd

Hugh Dickins <[email protected]>
kaiser: tidied up kaiser_add/remove_mapping slightly

Hugh Dickins <[email protected]>
kaiser: tidied up asm/kaiser.h somewhat

Hugh Dickins <[email protected]>
kaiser: ENOMEM if kaiser_pagetable_walk() NULL

Hugh Dickins <[email protected]>
kaiser: fix perf crashes

Hugh Dickins <[email protected]>
kaiser: fix regs to do_nmi() ifndef CONFIG_KAISER

Hugh Dickins <[email protected]>
kaiser: KAISER depends on SMP

Hugh Dickins <[email protected]>
kaiser: fix build and FIXME in alloc_ldt_struct()

Hugh Dickins <[email protected]>
kaiser: stack map PAGE_SIZE at THREAD_SIZE-PAGE_SIZE

Hugh Dickins <[email protected]>
kaiser: do not set _PAGE_NX on pgd_none

Dave Hansen <[email protected]>
kaiser: merged update

Richard Fellner <[email protected]>
KAISER: Kernel Address Isolation

Tom Lendacky <[email protected]>
x86/boot: Add early cmdline parsing for options with arguments

-------------

Diffstat:

 Documentation/kernel-parameters.txt         |   8 +
 Makefile                                    |   4 +-
 arch/x86/boot/compressed/misc.h             |   1 +
 arch/x86/entry/entry_64.S                   | 164 ++++++++--
 arch/x86/entry/entry_64_compat.S            |   7 +
 arch/x86/include/asm/cmdline.h              |   2 +
 arch/x86/include/asm/cpufeature.h           |   4 +
 arch/x86/include/asm/desc.h                 |   2 +-
 arch/x86/include/asm/hw_irq.h               |   2 +-
 arch/x86/include/asm/kaiser.h               | 141 +++++++++
 arch/x86/include/asm/pgtable.h              |  28 +-
 arch/x86/include/asm/pgtable_64.h           |  25 +-
 arch/x86/include/asm/pgtable_types.h        |  29 +-
 arch/x86/include/asm/processor.h            |   2 +-
 arch/x86/include/asm/tlbflush.h             |  74 ++++-
 arch/x86/include/uapi/asm/processor-flags.h |   3 +-
 arch/x86/kernel/cpu/common.c                |  28 +-
 arch/x86/kernel/cpu/perf_event_intel_ds.c   |  57 +++-
 arch/x86/kernel/espfix_64.c                 |  10 +
 arch/x86/kernel/head_64.S                   |  35 ++-
 arch/x86/kernel/irqinit.c                   |   2 +-
 arch/x86/kernel/ldt.c                       |  25 +-
 arch/x86/kernel/paravirt_patch_64.c         |   2 -
 arch/x86/kernel/process.c                   |   2 +-
 arch/x86/kernel/setup.c                     |   7 +
 arch/x86/kernel/tracepoint.c                |   2 +
 arch/x86/kvm/x86.c                          |   3 +-
 arch/x86/lib/cmdline.c                      | 105 +++++++
 arch/x86/mm/Makefile                        |   1 +
 arch/x86/mm/init.c                          |   2 +-
 arch/x86/mm/init_64.c                       |  10 +
 arch/x86/mm/kaiser.c                        | 455 ++++++++++++++++++++++++++++
 arch/x86/mm/pageattr.c                      |  63 +++-
 arch/x86/mm/pgtable.c                       |  16 +-
 arch/x86/mm/tlb.c                           |  39 ++-
 include/asm-generic/vmlinux.lds.h           |   7 +
 include/linux/kaiser.h                      |  52 ++++
 include/linux/mmzone.h                      |   3 +-
 include/linux/percpu-defs.h                 |  32 +-
 init/main.c                                 |   2 +
 kernel/fork.c                               |   6 +
 mm/vmstat.c                                 |   1 +
 security/Kconfig                            |  10 +
 43 files changed, 1375 insertions(+), 98 deletions(-)