Skip to content

4.14.18-stable review

Greg Kroah-Hartman kernel-hardening kernel-janitors kvm linux-arch linux-wireless lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest64 patches 3 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/64scripts/faddr2line: fix CROSS_COMPILE unset errorscripts/faddr2line+4 -40 replies
2/64powerpc/64s: Wire up cpu_show_meltdown()arch/powerpc/Kconfig arch/powerpc/kernel/setup_64.c+9 -00 replies
3/64powerpc/64s: Allow control of RFI flush via debugfsarch/powerpc/kernel/setup_64.c+30 -00 replies
4/64x86/retpoline: Remove the esp/rsp thunkarch/x86/include/asm/asm-prototypes.h arch/x86/lib/retpoline.S+0 -20 replies
5/64KVM: x86: Make indirect calls in emulator speculation safearch/x86/kvm/emulate.c+5 -40 replies
6/64KVM: VMX: Make indirect call speculation safearch/x86/kvm/vmx.c+2 -20 replies
7/64module/retpoline: Warn about missing retpoline in modulearch/x86/kernel/cpu/bugs.c include/linux/module.h kernel/module.c +1 more+45 -10 replies
8/64x86/cpufeatures: Add CPUID_7_EDX CPUID leafarch/x86/include/asm/cpufeature.h arch/x86/include/asm/cpufeatures.h arch/x86/include/asm/disabled-features.h +3 more+15 -90 replies
9/64x86/cpufeatures: Add Intel feature bits for Speculation Controlarch/x86/include/asm/cpufeatures.h+3 -00 replies
10/64x86/cpufeatures: Add AMD feature bits for Speculation Controlarch/x86/include/asm/cpufeatures.h+3 -00 replies
11/64x86/msr: Add definitions for new speculation control MSRsarch/x86/include/asm/msr-index.h+12 -00 replies
12/64x86/pti: Do not enable PTI on CPUs which are not vulnerable to Meltdownarch/x86/kernel/cpu/common.c+43 -50 replies
13/64x86/cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodesarch/x86/kernel/cpu/intel.c+66 -00 replies
14/64x86/speculation: Add basic IBPB (Indirect Branch Prediction Barrier) supportarch/x86/include/asm/cpufeatures.h arch/x86/include/asm/nospec-branch.h arch/x86/kernel/cpu/bugs.c+24 -10 replies
15/64x86/alternative: Print unadorned pointersarch/x86/kernel/alternative.c+7 -70 replies
16/64x86/nospec: Fix header guards namesarch/x86/include/asm/nospec-branch.h+3 -30 replies
17/64x86/bugs: Drop one "mitigation" from dmesgarch/x86/kernel/cpu/bugs.c+1 -10 replies
18/64x86/cpu/bugs: Make retpoline module warning conditionalarch/x86/kernel/cpu/bugs.c+11 -30 replies
19/64x86/cpufeatures: Clean up Spectre v2 related CPUID flagsarch/x86/include/asm/cpufeatures.h arch/x86/include/asm/nospec-branch.h arch/x86/kernel/cpu/bugs.c +1 more+34 -240 replies
20/64x86/retpoline: Simplify vmexit_fill_RSB()arch/x86/entry/entry_32.S arch/x86/entry/entry_64.S arch/x86/include/asm/asm-prototypes.h +3 more+71 -650 replies
21/64x86/speculation: Simplify indirect_branch_prediction_barrier()arch/x86/include/asm/nospec-branch.h arch/x86/include/asm/processor.h arch/x86/kernel/cpu/bugs.c+13 -90 replies
22/64auxdisplay: img-ascii-lcd: add missing MODULE_DESCRIPTION/AUTHOR/LICENSEdrivers/auxdisplay/img-ascii-lcd.c+4 -00 replies
23/64iio: adc/accel: Fix up module licensesdrivers/iio/accel/kxsd9-i2c.c drivers/iio/adc/qcom-vadc-common.c+7 -00 replies
24/64pinctrl: pxa: pxa2xx: add missing MODULE_DESCRIPTION/AUTHOR/LICENSEdrivers/pinctrl/pxa/pinctrl-pxa2xx.c+4 -00 replies
25/64ASoC: pcm512x: add missing MODULE_DESCRIPTION/AUTHOR/LICENSEsound/soc/codecs/pcm512x-spi.c+4 -00 replies
26/64KVM: nVMX: Eliminate vmcs02 poolarch/x86/kvm/vmx.c+23 -1230 replies
27/64KVM: VMX: introduce alloc_loaded_vmcsarch/x86/kvm/vmx.c+22 -140 replies
28/64objtool: Improve retpoline alternative handlingtools/objtool/check.c+16 -200 replies
29/64objtool: Add support for alternatives at the end of a sectiontools/objtool/check.c+31 -220 replies
30/64objtool: Warn on stripped section symboltools/objtool/orc_gen.c+5 -00 replies
31/64x86/mm: Fix overlap of i386 CPU_ENTRY_AREA with FIX_BTMAParch/x86/include/asm/fixmap.h arch/x86/include/asm/pgtable_32_types.h+7 -40 replies
32/64x86/spectre: Check CONFIG_RETPOLINE in command line parserarch/x86/kernel/cpu/bugs.c+3 -30 replies
33/64x86/entry/64: Remove the SYSCALL64 fast patharch/x86/entry/entry_64.S arch/x86/entry/syscall_64.c+2 -1220 replies
34/64x86/entry/64: Push extra regs right awayarch/x86/entry/entry_64.S+7 -30 replies
35/64x86/asm: Move status from thread_struct to thread_infoarch/x86/entry/common.c arch/x86/include/asm/processor.h arch/x86/include/asm/syscall.h +4 more+11 -120 replies
36/64Documentation: Document array_index_nospecDocumentation/speculation.txt+90 -00 replies
37/64array_index_nospec: Sanitize speculative array de-referencesinclude/linux/nospec.h+72 -00 replies
38/64x86: Implement array_index_mask_nospecarch/x86/include/asm/barrier.h+24 -00 replies
39/64x86: Introduce barrier_nospecarch/x86/include/asm/barrier.h arch/x86/include/asm/msr.h+5 -20 replies
40/64x86: Introduce __uaccess_begin_nospec() and uaccess_try_nospecarch/x86/include/asm/uaccess.h+9 -00 replies
41/64x86/usercopy: Replace open coded stac/clac with __uaccess_{begin, end}arch/x86/lib/usercopy_32.c+4 -40 replies
42/64x86/uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospecarch/x86/include/asm/uaccess.h arch/x86/include/asm/uaccess_32.h arch/x86/include/asm/uaccess_64.h +1 more+14 -140 replies
43/64x86/get_user: Use pointer masking to limit speculationarch/x86/lib/getuser.S+10 -00 replies
44/64x86/syscall: Sanitize syscall table de-references under speculationarch/x86/entry/common.c+4 -10 replies
45/64vfs, fdtable: Prevent bounds-check bypass via speculative executioninclude/linux/fdtable.h+4 -10 replies
46/64nl80211: Sanitize array index in parse_txq_paramsnet/wireless/nl80211.c+6 -30 replies
47/64x86/spectre: Report get_user mitigation for spectre_v1arch/x86/kernel/cpu/bugs.c+1 -10 replies
48/64x86/spectre: Fix spelling mistake: "vunerable"-> "vulnerable"arch/x86/kernel/cpu/bugs.c+1 -10 replies
49/64x86/cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intelarch/x86/kernel/cpu/common.c arch/x86/kernel/cpu/intel.c+29 -190 replies
50/64x86/speculation: Use Indirect Branch Prediction Barrier in context switcharch/x86/include/asm/tlbflush.h arch/x86/mm/tlb.c+34 -10 replies
51/64x86/paravirt: Remove noreplace-paravirt cmdline optionDocumentation/admin-guide/kernel-parameters.txt arch/x86/kernel/alternative.c+0 -160 replies
52/64KVM: VMX: make MSR bitmaps per-VCPUarch/x86/kvm/vmx.c+150 -1260 replies
53/64x86/kvm: Update spectre-v1 mitigationarch/x86/kvm/vmx.c+9 -110 replies
54/64x86/retpoline: Avoid retpolines for built-in __init functionsinclude/linux/init.h+8 -10 replies
55/64x86/spectre: Simplify spectre_v2 command line parsingarch/x86/kernel/cpu/bugs.c+55 -290 replies
56/64x86/pti: Mark constant arrays as __initconstarch/x86/kernel/cpu/common.c+2 -20 replies
57/64x86/speculation: Fix typo IBRS_ATT, which should be IBRS_ALLarch/x86/include/asm/nospec-branch.h+1 -10 replies
58/64KVM/x86: Update the reverse_cpuid list to include CPUID_7_EDXarch/x86/kvm/cpuid.c arch/x86/kvm/cpuid.h+4 -50 replies
59/64KVM/x86: Add IBPB supportarch/x86/kvm/cpuid.c arch/x86/kvm/svm.c arch/x86/kvm/vmx.c+116 -30 replies
60/64KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIESarch/x86/kvm/cpuid.c arch/x86/kvm/vmx.c arch/x86/kvm/x86.c+17 -10 replies
61/64KVM/VMX: Allow direct access to MSR_IA32_SPEC_CTRLarch/x86/kvm/cpuid.c arch/x86/kvm/vmx.c arch/x86/kvm/x86.c+110 -60 replies
62/64KVM/SVM: Allow direct access to MSR_IA32_SPEC_CTRLarch/x86/kvm/svm.c+88 -00 replies
63/64serial: core: mark port as initialized after successful IRQ changedrivers/tty/serial/serial_core.c+2 -00 replies
64/64fpga: region: release of_parse_phandle nodes after usedrivers/fpga/fpga-region.c+10 -30 replies

Reviews trailers per patch

26 of 64 patches have a Reviewed-by or Acked-by.

PatchRichard WeinbergerNicholas PigginDavid WoodhouseGreg Kroah-HartmanBorislav PetkovDave HansenAmeya MoreDavid HildenbrandPaolo BonziniGuenter RoeckIngo MolnarLinus TorvaldsKees CookJohannes BergJuergen GrossKonrad Rzeszutek WilkJim MattsonDarren Kenny
1/64R-b
2/64
3/64R-b
4/64A-b
5/64R-b
6/64R-b
7/64
8/64R-b R-b
9/64R-b R-b
10/64R-b
11/64R-b
12/64R-b R-b A-b
13/64R-b
14/64
15/64
16/64
17/64R-b
18/64
19/64Originally-by
20/64
21/64
22/64
23/64
24/64
25/64
26/64R-b R-b R-b
27/64
28/64Reported-and-tested-by
29/64
30/64
31/64
32/64
33/64A-b
34/64A-b
35/64R-b A-b
36/64R-b
37/64
38/64
39/64
40/64
41/64
42/64
43/64
44/64
45/64
46/64A-b
47/64
48/64
49/64
50/64
51/64R-b
52/64
53/64A-b
54/64
55/64
56/64
57/64R-b
58/64R-b R-b R-b
59/64R-b
60/64R-b R-b R-b R-b
61/64R-b R-b R-b
62/64R-b R-b
63/64
64/64

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 18 reviewers.

Read the v1 thread

Cover letter [PATCH 4.14 00/64] 4.14.18-stable review

This is the start of the stable review cycle for the 4.14.18 release. There are 64 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Wed Feb 7 18:21:22 UTC 2018. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.14.18-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.14.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 4.14.18-rc1

Ian Abbott <[email protected]>
fpga: region: release of_parse_phandle nodes after use

Sebastian Andrzej Siewior <[email protected]>
serial: core: mark port as initialized after successful IRQ change

KarimAllah Ahmed <[email protected]>
KVM/SVM: Allow direct access to MSR_IA32_SPEC_CTRL

KarimAllah Ahmed <[email protected]>
KVM/VMX: Allow direct access to MSR_IA32_SPEC_CTRL

KarimAllah Ahmed <[email protected]>
KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES

Ashok Raj <[email protected]>
KVM/x86: Add IBPB support

KarimAllah Ahmed <[email protected]>
KVM/x86: Update the reverse_cpuid list to include CPUID_7_EDX

Darren Kenny <[email protected]>
x86/speculation: Fix typo IBRS_ATT, which should be IBRS_ALL

Arnd Bergmann <[email protected]>
x86/pti: Mark constant arrays as __initconst

KarimAllah Ahmed <[email protected]>
x86/spectre: Simplify spectre_v2 command line parsing

David Woodhouse <[email protected]>
x86/retpoline: Avoid retpolines for built-in __init functions

Dan Williams <[email protected]>
x86/kvm: Update spectre-v1 mitigation

Paolo Bonzini <[email protected]>
KVM: VMX: make MSR bitmaps per-VCPU

Josh Poimboeuf <[email protected]>
x86/paravirt: Remove 'noreplace-paravirt' cmdline option

Tim Chen <[email protected]>
x86/speculation: Use Indirect Branch Prediction Barrier in context switch

David Woodhouse <[email protected]>
x86/cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel

Colin Ian King <[email protected]>

    x86/spectre: Fix spelling mistake: "vunerable"-> "vulnerable"

Dan Williams <[email protected]>
x86/spectre: Report get_user mitigation for spectre_v1

Dan Williams <[email protected]>
nl80211: Sanitize array index in parse_txq_params

Dan Williams <[email protected]>
vfs, fdtable: Prevent bounds-check bypass via speculative execution

Dan Williams <[email protected]>
x86/syscall: Sanitize syscall table de-references under speculation

Dan Williams <[email protected]>
x86/get_user: Use pointer masking to limit speculation

Dan Williams <[email protected]>
x86/uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec

Dan Williams <[email protected]>

    x86/usercopy: Replace open coded stac/clac with __uaccess_{begin, end}

Dan Williams <[email protected]>
x86: Introduce __uaccess_begin_nospec() and uaccess_try_nospec

Dan Williams <[email protected]>
x86: Introduce barrier_nospec

Dan Williams <[email protected]>
x86: Implement array_index_mask_nospec

Dan Williams <[email protected]>
array_index_nospec: Sanitize speculative array de-references

Mark Rutland <[email protected]>
Documentation: Document array_index_nospec

Andy Lutomirski <[email protected]>
x86/asm: Move 'status' from thread_struct to thread_info

Andy Lutomirski <[email protected]>
x86/entry/64: Push extra regs right away

Andy Lutomirski <[email protected]>
x86/entry/64: Remove the SYSCALL64 fast path

Dou Liyang <[email protected]>
x86/spectre: Check CONFIG_RETPOLINE in command line parser

William Grant <[email protected]>
x86/mm: Fix overlap of i386 CPU_ENTRY_AREA with FIX_BTMAP

Josh Poimboeuf <[email protected]>
objtool: Warn on stripped section symbol

Josh Poimboeuf <[email protected]>
objtool: Add support for alternatives at the end of a section

Josh Poimboeuf <[email protected]>
objtool: Improve retpoline alternative handling

Paolo Bonzini <[email protected]>
KVM: VMX: introduce alloc_loaded_vmcs

Jim Mattson <[email protected]>
KVM: nVMX: Eliminate vmcs02 pool

Jesse Chan <[email protected]>
ASoC: pcm512x: add missing MODULE_DESCRIPTION/AUTHOR/LICENSE

Jesse Chan <[email protected]>
pinctrl: pxa: pxa2xx: add missing MODULE_DESCRIPTION/AUTHOR/LICENSE

Linus Walleij <[email protected]>
iio: adc/accel: Fix up module licenses

Jesse Chan <[email protected]>
auxdisplay: img-ascii-lcd: add missing MODULE_DESCRIPTION/AUTHOR/LICENSE

Borislav Petkov <[email protected]>
x86/speculation: Simplify indirect_branch_prediction_barrier()

Borislav Petkov <[email protected]>
x86/retpoline: Simplify vmexit_fill_RSB()

David Woodhouse <[email protected]>
x86/cpufeatures: Clean up Spectre v2 related CPUID flags

Thomas Gleixner <[email protected]>
x86/cpu/bugs: Make retpoline module warning conditional

Borislav Petkov <[email protected]>
x86/bugs: Drop one "mitigation" from dmesg

Borislav Petkov <[email protected]>
x86/nospec: Fix header guards names

Borislav Petkov <[email protected]>
x86/alternative: Print unadorned pointers

David Woodhouse <[email protected]>
x86/speculation: Add basic IBPB (Indirect Branch Prediction Barrier) support

David Woodhouse <[email protected]>
x86/cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes

David Woodhouse <[email protected]>
x86/pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown

David Woodhouse <[email protected]>
x86/msr: Add definitions for new speculation control MSRs

David Woodhouse <[email protected]>
x86/cpufeatures: Add AMD feature bits for Speculation Control

David Woodhouse <[email protected]>
x86/cpufeatures: Add Intel feature bits for Speculation Control

David Woodhouse <[email protected]>
x86/cpufeatures: Add CPUID_7_EDX CPUID leaf

Andi Kleen <[email protected]>
module/retpoline: Warn about missing retpoline in module

Peter Zijlstra <[email protected]>
KVM: VMX: Make indirect call speculation safe

Peter Zijlstra <[email protected]>
KVM: x86: Make indirect calls in emulator speculation safe

Waiman Long <[email protected]>
x86/retpoline: Remove the esp/rsp thunk

Michael Ellerman <[email protected]>
powerpc/64s: Allow control of RFI flush via debugfs

Michael Ellerman <[email protected]>
powerpc/64s: Wire up cpu_show_meltdown()

Liu, Changcheng <[email protected]>
scripts/faddr2line: fix CROSS_COMPILE unset error

-------------

Diffstat:

 Documentation/admin-guide/kernel-parameters.txt |   2 -
 Documentation/speculation.txt                   |  90 ++++
 Makefile                                        |   4 +-
 arch/powerpc/Kconfig                            |   1 +
 arch/powerpc/kernel/setup_64.c                  |  38 ++
 arch/x86/entry/common.c                         |   9 +-
 arch/x86/entry/entry_32.S                       |   3 +-
 arch/x86/entry/entry_64.S                       | 130 +----
 arch/x86/entry/syscall_64.c                     |   7 +-
 arch/x86/include/asm/asm-prototypes.h           |   4 +-
 arch/x86/include/asm/barrier.h                  |  28 +
 arch/x86/include/asm/cpufeature.h               |   7 +-
 arch/x86/include/asm/cpufeatures.h              |  22 +-
 arch/x86/include/asm/disabled-features.h        |   3 +-
 arch/x86/include/asm/fixmap.h                   |   6 +-
 arch/x86/include/asm/msr-index.h                |  12 +
 arch/x86/include/asm/msr.h                      |   3 +-
 arch/x86/include/asm/nospec-branch.h            |  86 +--
 arch/x86/include/asm/pgtable_32_types.h         |   5 +-
 arch/x86/include/asm/processor.h                |   5 +-
 arch/x86/include/asm/required-features.h        |   3 +-
 arch/x86/include/asm/syscall.h                  |   6 +-
 arch/x86/include/asm/thread_info.h              |   3 +-
 arch/x86/include/asm/tlbflush.h                 |   2 +
 arch/x86/include/asm/uaccess.h                  |  15 +-
 arch/x86/include/asm/uaccess_32.h               |   6 +-
 arch/x86/include/asm/uaccess_64.h               |  12 +-
 arch/x86/kernel/alternative.c                   |  28 +-
 arch/x86/kernel/cpu/bugs.c                      | 134 +++--
 arch/x86/kernel/cpu/common.c                    |  70 ++-
 arch/x86/kernel/cpu/intel.c                     |  66 +++
 arch/x86/kernel/cpu/scattered.c                 |   2 -
 arch/x86/kernel/process_64.c                    |   4 +-
 arch/x86/kernel/ptrace.c                        |   2 +-
 arch/x86/kernel/signal.c                        |   2 +-
 arch/x86/kvm/cpuid.c                            |  22 +-
 arch/x86/kvm/cpuid.h                            |   1 +
 arch/x86/kvm/emulate.c                          |   9 +-
 arch/x86/kvm/svm.c                              | 116 +++++
 arch/x86/kvm/vmx.c                              | 660 ++++++++++++++----------
 arch/x86/kvm/x86.c                              |   1 +
 arch/x86/lib/Makefile                           |   1 +
 arch/x86/lib/getuser.S                          |  10 +
 arch/x86/lib/retpoline.S                        |  57 +-
 arch/x86/lib/usercopy_32.c                      |   8 +-
 arch/x86/mm/tlb.c                               |  33 +-
 drivers/auxdisplay/img-ascii-lcd.c              |   4 +
 drivers/fpga/fpga-region.c                      |  13 +-
 drivers/iio/accel/kxsd9-i2c.c                   |   3 +
 drivers/iio/adc/qcom-vadc-common.c              |   4 +
 drivers/pinctrl/pxa/pinctrl-pxa2xx.c            |   4 +
 drivers/tty/serial/serial_core.c                |   2 +
 include/linux/fdtable.h                         |   5 +-
 include/linux/init.h                            |   9 +-
 include/linux/module.h                          |   9 +
 include/linux/nospec.h                          |  72 +++
 kernel/module.c                                 |  11 +
 net/wireless/nl80211.c                          |   9 +-
 scripts/faddr2line                              |   8 +-
 scripts/mod/modpost.c                           |   9 +
 sound/soc/codecs/pcm512x-spi.c                  |   4 +
 tools/objtool/check.c                           |  89 ++--
 tools/objtool/orc_gen.c                         |   5 +
 63 files changed, 1355 insertions(+), 643 deletions(-)

Read the cover letter in its thread