Skip to content

4.9.75-stable review

Greg Kroah-Hartman kernel-hardening kvm linux-arch linux-efi linux-mm lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest39 patches 15 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/39tcp_bbr: reset full pipe detection on loss recovery undonet/ipv4/tcp_bbr.c+4 -00 replies
2/39tcp_bbr: reset long-term bandwidth sampling on loss recovery undonet/ipv4/tcp_bbr.c+1 -00 replies
3/39x86/boot: Add early cmdline parsing for options with argumentsarch/x86/include/asm/cmdline.h arch/x86/lib/cmdline.c+107 -00 replies
4/39KAISER: Kernel Address Isolationarch/x86/entry/entry_64.S arch/x86/entry/entry_64_compat.S arch/x86/include/asm/hw_irq.h +19 more+449 -160 replies
5/39kaiser: merged updatearch/x86/entry/entry_64.S arch/x86/include/asm/kaiser.h arch/x86/include/asm/pgtable.h +12 more+551 -1900 replies
6/39kaiser: do not set _PAGE_NX on pgd_nonearch/x86/boot/compressed/misc.h arch/x86/include/asm/pgtable_64.h arch/x86/mm/kaiser.c +1 more+58 -400 replies
7/39kaiser: stack map PAGE_SIZE at THREAD_SIZE-PAGE_SIZEinclude/linux/kaiser.h init/main.c kernel/fork.c+36 -170 replies
8/39kaiser: fix build and FIXME in alloc_ldt_struct()arch/x86/kernel/ldt.c+4 -60 replies
9/39kaiser: KAISER depends on SMPsecurity/Kconfig+6 -40 replies
10/39kaiser: fix regs to do_nmi() ifndef CONFIG_KAISERarch/x86/entry/entry_64.S+6 -50 replies
11/39kaiser: fix perf crashesarch/x86/events/intel/ds.c+45 -120 replies
12/39kaiser: ENOMEM if kaiser_pagetable_walk() NULLarch/x86/mm/kaiser.c+7 -30 replies
13/39kaiser: tidied up asm/kaiser.h somewhatarch/x86/include/asm/kaiser.h+13 -190 replies
14/39kaiser: tidied up kaiser_add/remove_mapping slightlyarch/x86/mm/kaiser.c+3 -60 replies
15/39kaiser: align addition to x86/mm/Makefilearch/x86/mm/Makefile+2 -20 replies
16/39kaiser: cleanups while trying for gold linkarch/x86/include/asm/desc.h arch/x86/include/asm/processor.h include/asm-generic/vmlinux.lds.h +1 more+21 -280 replies
17/39kaiser: name that 0x1000 KAISER_SHADOW_PGD_OFFSETarch/x86/entry/entry_64.S arch/x86/include/asm/kaiser.h+7 -40 replies
18/39kaiser: delete KAISER_REAL_SWITCH optionarch/x86/entry/entry_64.S arch/x86/include/asm/kaiser.h security/Kconfig+0 -120 replies
19/39kaiser: vmstat show NR_KAISERTABLE as nr_overheadarch/x86/mm/kaiser.c include/linux/mmzone.h mm/vmstat.c+14 -60 replies
20/39kaiser: enhanced by kernel and user PCIDsarch/x86/entry/entry_64.S arch/x86/entry/entry_64_compat.S arch/x86/include/asm/cpufeatures.h +8 more+182 -180 replies
21/39kaiser: load_new_mm_cr3() let SWITCH_USER_CR3 flush userarch/x86/include/asm/kaiser.h arch/x86/include/asm/tlbflush.h arch/x86/kernel/cpu/common.c +2 more+113 -790 replies
22/39kaiser: PCID 0 for kernel and 128 for userarch/x86/include/asm/kaiser.h arch/x86/include/asm/pgtable_types.h arch/x86/mm/tlb.c+19 -100 replies
23/39kaiser: x86_cr3_pcid_noflush and x86_cr3_pcid_userarch/x86/entry/entry_64.S arch/x86/include/asm/kaiser.h arch/x86/mm/kaiser.c+16 -160 replies
24/39kaiser: paranoid_entry pass cr3 need to paranoid_exitarch/x86/entry/entry_64.S arch/x86/entry/entry_64_compat.S arch/x86/include/asm/kaiser.h+37 -190 replies
25/39kaiser: kaiser_remove_mapping() move along the pgdarch/x86/mm/kaiser.c+6 -40 replies
26/39kaiser: fix unlikely error in alloc_ldt_struct()arch/x86/kernel/ldt.c+1 -10 replies
27/39kaiser: add "nokaiser" boot option, using ALTERNATIVEDocumentation/kernel-parameters.txt arch/x86/entry/entry_64.S arch/x86/include/asm/cpufeatures.h +14 more+146 -650 replies
28/39x86/kaiser: Rename and simplify X86_FEATURE_KAISER handlingDocumentation/kernel-parameters.txt arch/x86/kernel/cpu/common.c arch/x86/mm/kaiser.c+20 -200 replies
29/39x86/kaiser: Check boottime cmdline paramsDocumentation/kernel-parameters.txt arch/x86/mm/kaiser.c+47 -183 replies
30/39kaiser: use ALTERNATIVE instead of x86_cr3_pcid_noflusharch/x86/entry/entry_64.S arch/x86/include/asm/kaiser.h arch/x86/mm/kaiser.c+8 -160 replies
31/39kaiser: drop is_atomic arg to kaiser_pagetable_walk()arch/x86/mm/kaiser.c+2 -80 replies
32/39kaiser: asm/tlbflush.h handle noPGE at lower levelarch/x86/include/asm/tlbflush.h+3 -240 replies
33/39kaiser: kaiser_flush_tlb_on_return_to_user() check PCIDarch/x86/include/asm/tlbflush.h arch/x86/mm/kaiser.c arch/x86/mm/tlb.c+9 -90 replies
34/39x86/paravirt: Dont patch flush_tlb_singlearch/x86/kernel/paravirt_patch_64.c+0 -20 replies
35/39x86/kaiser: Reenable PARAVIRTsecurity/Kconfig+1 -10 replies
36/39kaiser: disabled on Xen PVarch/x86/mm/kaiser.c+5 -00 replies
37/39x86/kaiser: Move feature detection uparch/x86/include/asm/kaiser.h arch/x86/kernel/setup.c arch/x86/mm/kaiser.c+9 -20 replies
38/39KPTI: Rename to PAGE_TABLE_ISOLATIONarch/x86/boot/compressed/misc.h arch/x86/entry/entry_64.S arch/x86/events/intel/ds.c +13 more+31 -310 replies
39/39KPTI: Report when enabledarch/x86/mm/kaiser.c+6 -10 replies

Reviews trailers per patch

10 of 39 patches have a Reviewed-by or Acked-by.

PatchThomas GleixnerJiri KosinaJosh PoimboeufJuergen GrossPeter ZijlstraBorislav PetkovYuchung ChengSoheil Hassas YeganehNaresh Kamboju
SeriesT-b
1/39R-b A-b
2/39R-b A-b
3/39R-b
4/39A-b
5/39
6/39
7/39
8/39
9/39
10/39
11/39
12/39
13/39
14/39
15/39
16/39
17/39
18/39
19/39
20/39
21/39
22/39
23/39
24/39
25/39
26/39
27/39A-b
28/39
29/39
30/39A-b
31/39A-b
32/39A-b
33/39A-b
34/39R-b R-b A-b A-b
35/39
36/39
37/39
38/39
39/39

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 9 reviewers.

Read the v1 thread

Cover letter [PATCH 4.9 00/39] 4.9.75-stable review

This is the start of the stable review cycle for the 4.9.75 release. There are 39 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Fri Jan 5 19:50:44 UTC 2018. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.75-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 4.9.75-rc1

Kees Cook <[email protected]>
KPTI: Report when enabled

Kees Cook <[email protected]>
KPTI: Rename to PAGE_TABLE_ISOLATION

Borislav Petkov <[email protected]>
x86/kaiser: Move feature detection up

Jiri Kosina <[email protected]>
kaiser: disabled on Xen PV

Borislav Petkov <[email protected]>
x86/kaiser: Reenable PARAVIRT

Thomas Gleixner <[email protected]>
x86/paravirt: Dont patch flush_tlb_single

Hugh Dickins <[email protected]>
kaiser: kaiser_flush_tlb_on_return_to_user() check PCID

Hugh Dickins <[email protected]>
kaiser: asm/tlbflush.h handle noPGE at lower level

Hugh Dickins <[email protected]>
kaiser: drop is_atomic arg to kaiser_pagetable_walk()

Hugh Dickins <[email protected]>
kaiser: use ALTERNATIVE instead of x86_cr3_pcid_noflush

Borislav Petkov <[email protected]>
x86/kaiser: Check boottime cmdline params

Borislav Petkov <[email protected]>
x86/kaiser: Rename and simplify X86_FEATURE_KAISER handling

Hugh Dickins <[email protected]>
kaiser: add "nokaiser" boot option, using ALTERNATIVE

Hugh Dickins <[email protected]>
kaiser: fix unlikely error in alloc_ldt_struct()

Hugh Dickins <[email protected]>
kaiser: kaiser_remove_mapping() move along the pgd

Hugh Dickins <[email protected]>
kaiser: paranoid_entry pass cr3 need to paranoid_exit

Hugh Dickins <[email protected]>

    kaiser: x86_cr3_pcid_noflush and x86_cr3_pcid_user

Hugh Dickins <[email protected]>
kaiser: PCID 0 for kernel and 128 for user

Hugh Dickins <[email protected]>
kaiser: load_new_mm_cr3() let SWITCH_USER_CR3 flush user

Hugh Dickins <[email protected]>
kaiser: enhanced by kernel and user PCIDs

Hugh Dickins <[email protected]>
kaiser: vmstat show NR_KAISERTABLE as nr_overhead

Hugh Dickins <[email protected]>
kaiser: delete KAISER_REAL_SWITCH option

Hugh Dickins <[email protected]>

    kaiser: name that 0x1000 KAISER_SHADOW_PGD_OFFSET

Hugh Dickins <[email protected]>
kaiser: cleanups while trying for gold link

Hugh Dickins <[email protected]>
kaiser: align addition to x86/mm/Makefile

Hugh Dickins <[email protected]>
kaiser: tidied up kaiser_add/remove_mapping slightly

Hugh Dickins <[email protected]>
kaiser: tidied up asm/kaiser.h somewhat

Hugh Dickins <[email protected]>
kaiser: ENOMEM if kaiser_pagetable_walk() NULL

Hugh Dickins <[email protected]>
kaiser: fix perf crashes

Hugh Dickins <[email protected]>
kaiser: fix regs to do_nmi() ifndef CONFIG_KAISER

Hugh Dickins <[email protected]>
kaiser: KAISER depends on SMP

Hugh Dickins <[email protected]>
kaiser: fix build and FIXME in alloc_ldt_struct()

Hugh Dickins <[email protected]>
kaiser: stack map PAGE_SIZE at THREAD_SIZE-PAGE_SIZE

Hugh Dickins <[email protected]>
kaiser: do not set _PAGE_NX on pgd_none

Dave Hansen <[email protected]>
kaiser: merged update

Richard Fellner <[email protected]>
KAISER: Kernel Address Isolation

Tom Lendacky <[email protected]>
x86/boot: Add early cmdline parsing for options with arguments

Neal Cardwell <[email protected]>
tcp_bbr: reset long-term bandwidth sampling on loss recovery undo

Neal Cardwell <[email protected]>
tcp_bbr: reset full pipe detection on loss recovery undo

-------------

Diffstat:

 Documentation/kernel-parameters.txt         |   8 +
 Makefile                                    |   4 +-
 arch/x86/boot/compressed/misc.h             |   1 +
 arch/x86/entry/entry_64.S                   | 163 ++++++++--
 arch/x86/entry/entry_64_compat.S            |   8 +-
 arch/x86/events/intel/ds.c                  |  57 +++-
 arch/x86/include/asm/cmdline.h              |   2 +
 arch/x86/include/asm/cpufeatures.h          |   4 +
 arch/x86/include/asm/desc.h                 |   2 +-
 arch/x86/include/asm/hw_irq.h               |   2 +-
 arch/x86/include/asm/kaiser.h               | 141 +++++++++
 arch/x86/include/asm/pgtable.h              |  28 +-
 arch/x86/include/asm/pgtable_64.h           |  25 +-
 arch/x86/include/asm/pgtable_types.h        |  29 +-
 arch/x86/include/asm/processor.h            |   2 +-
 arch/x86/include/asm/tlbflush.h             |  74 ++++-
 arch/x86/include/uapi/asm/processor-flags.h |   3 +-
 arch/x86/kernel/cpu/common.c                |  28 +-
 arch/x86/kernel/espfix_64.c                 |  10 +
 arch/x86/kernel/head_64.S                   |  35 ++-
 arch/x86/kernel/irqinit.c                   |   2 +-
 arch/x86/kernel/ldt.c                       |  25 +-
 arch/x86/kernel/paravirt_patch_64.c         |   2 -
 arch/x86/kernel/process.c                   |   2 +-
 arch/x86/kernel/setup.c                     |   7 +
 arch/x86/kernel/tracepoint.c                |   2 +
 arch/x86/kvm/x86.c                          |   3 +-
 arch/x86/lib/cmdline.c                      | 105 +++++++
 arch/x86/mm/Makefile                        |   4 +-
 arch/x86/mm/init.c                          |   2 +-
 arch/x86/mm/init_64.c                       |  10 +
 arch/x86/mm/kaiser.c                        | 454 ++++++++++++++++++++++++++++
 arch/x86/mm/kaslr.c                         |   4 +-
 arch/x86/mm/pageattr.c                      |  63 +++-
 arch/x86/mm/pgtable.c                       |  12 +-
 arch/x86/mm/tlb.c                           |  39 ++-
 include/asm-generic/vmlinux.lds.h           |   7 +
 include/linux/kaiser.h                      |  52 ++++
 include/linux/mmzone.h                      |   3 +-
 include/linux/percpu-defs.h                 |  32 +-
 init/main.c                                 |   2 +
 kernel/fork.c                               |   6 +
 mm/vmstat.c                                 |   1 +
 net/ipv4/tcp_bbr.c                          |   5 +
 security/Kconfig                            |  10 +
 tools/arch/x86/include/asm/cpufeatures.h    |   3 +
 46 files changed, 1382 insertions(+), 101 deletions(-)