| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
admin-guide/hw-vuln/core-scheduling: fix return type of PR_SCHED_CORE_GET stable inclusion from stable-v6.6.32 commit 1266e5a8f5bceb828bf3456fee08c0a81bd9b283 bugzilla: https://gitee.com/openeuler/kernel/issues/IA4MGD Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=1266e5a8f5bceb828bf3456fee08c0a81bd9b283 -------------------------------- commit 8af2d1ab78f2342f8c4c3740ca02d86f0ebfac5a upstream. sched_core_share_pid() copies the cookie to userspace with put_user(id, (u64 __user *)uaddr), expecting 64 bits of space. The "unsigned long" datatype that is documented in core-scheduling.rst however is only 32 bits large on 32 bit architectures. Document "unsigned long long" as the correct data type that is always 64bits large. This matches what the selftest cs_prctl_test.c has been doing all along. Fixes: 0159bb020ca9 ("Documentation: Add usecases, design and interface for core scheduling") Cc: stable@vger.kernel.org Link: https://lore.kernel.org/util-linux/df7a25a0-7923-4f8b-a527-5e6f0064074d@t-8ch.de/ Signed-off-by: Thomas Weißschuh <linux@weissschuh.net> Reviewed-by: Chris Hyser <chris.hyser@oracle.com> Signed-off-by: Jonathan Corbet <corbet@lwn.net> Link: https://lore.kernel.org/r/20240423-core-scheduling-cookie-v1-1-5753a35f8dfc@weissschuh.net Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: ZhangPeng <zhangpeng362@huawei.com> | 2 年前 | |
Documentation/hw-vuln: Fix rST warning The following warning: Documentation/admin-guide/hw-vuln/cross-thread-rsb.rst:92: ERROR: Unexpected indentation. was introduced by commit 493a2c2d23ca. Fix it by placing everything in the same paragraph and also use a monospace font. Fixes: 493a2c2d23ca ("Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions") Reported-by: Stephen Rothwell <sfr@canb@auug.org.au> Signed-off-by: Paolo Bonzini <pbonzini@redhat.com> | 3 年前 | |
Documentation/x86: Fix backwards on/off logic about YMM support These options clearly turn *off* XSAVE YMM support. Correct the typo. Reported-by: Ben Hutchings <ben@decadent.org.uk> Fixes: 553a5c03e90a ("x86/speculation: Add force option to GDS mitigation") Signed-off-by: Dave Hansen <dave.hansen@linux.intel.com> | 2 年前 | |
x86/bugs: Add RSB mitigation document mainline inclusion from mainline-v6.15-rc2 commit 83f6665a49c3d44ad0c08f837d352dd290f5d10b category: feature bugzilla: https://atomgit.com/openeuler/kernel/issues/8403 CVE: NA Reference: https://github.com/torvalds/linux/commit/83f6665a49c3d44ad0c08f837d352dd290f5d10b -------------------------------- commit 83f6665a49c3d44ad0c08f837d352dd290f5d10b upstream Create a document to summarize hard-earned knowledge about RSB-related mitigations, with references, and replace the overly verbose yet incomplete comments with a reference to the document. Signed-off-by: Josh Poimboeuf <jpoimboe@kernel.org> Signed-off-by: Ingo Molnar <mingo@kernel.org> Link: https://lore.kernel.org/r/ab73f4659ba697a974759f07befd41ae605e33dd.1744148254.git.jpoimboe@kernel.org Signed-off-by: PvsNarasimha <PVS.NarasimhaRao@amd.com> | 4 个月前 | |
Documentation: x86/bugs/its: Add ITS documentation stable inclusion from stable-v6.6.91 commit c6c1319d19fc0bb4fe0e911249340176c2aa1c62 category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/ID8GSU Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=c6c1319d19fc0bb4fe0e911249340176c2aa1c62 -------------------------------- commit 1ac116ce6468670eeda39345a5585df308243dca upstream. Add the admin-guide for Indirect Target Selection (ITS). Signed-off-by: Pawan Gupta <pawan.kumar.gupta@linux.intel.com> Signed-off-by: Dave Hansen <dave.hansen@linux.intel.com> Reviewed-by: Josh Poimboeuf <jpoimboe@kernel.org> Reviewed-by: Alexandre Chartre <alexandre.chartre@oracle.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit c6c1319d19fc0bb4fe0e911249340176c2aa1c62) Signed-off-by: Wentao Guan <guanwentao@uniontech.com> | 8 个月前 | |
Documentation: Add L1D flushing Documentation Add documentation of l1d flushing, explain the need for the feature and how it can be used. Signed-off-by: Balbir Singh <sblbir@amazon.com> Signed-off-by: Thomas Gleixner <tglx@linutronix.de> Link: https://lore.kernel.org/r/20210108121056.21940-6-sblbir@amazon.com | 4 年前 | |
docs: add IRQ documentation at the core-api book There are 4 IRQ documentation files under Documentation/*.txt. Move them into a new directory (core-api/irq) and add a new index file for it. While here, use a title markup for the Debugging section of the irq-domain.rst file. Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org> Link: https://lore.kernel.org/r/2da7485c3718e1442e6b4c2dd66857b776e8899b.1588345503.git.mchehab+huawei@kernel.org Signed-off-by: Jonathan Corbet <corbet@lwn.net> | 6 年前 | |
docs: move x86 documentation into Documentation/arch/ Move the x86 documentation under Documentation/arch/ as a way of cleaning up the top-level directory and making the structure of our docs more closely match the structure of the source directories it describes. All in-kernel references to the old paths have been updated. Acked-by: Dave Hansen <dave.hansen@linux.intel.com> Cc: linux-arch@vger.kernel.org Cc: x86@kernel.org Cc: Borislav Petkov <bp@alien8.de> Cc: Thomas Gleixner <tglx@linutronix.de> Link: https://lore.kernel.org/lkml/20230315211523.108836-1-corbet@lwn.net/ Signed-off-by: Jonathan Corbet <corbet@lwn.net> | 3 年前 | |
x86/bugs/multihit: Fix mitigation reporting when VMX is not in use On systems that have virtualization disabled or unsupported, sysfs mitigation for X86_BUG_ITLB_MULTIHIT is reported incorrectly as: $ cat /sys/devices/system/cpu/vulnerabilities/itlb_multihit KVM: Vulnerable System is not vulnerable to DoS attack from a rogue guest when virtualization is disabled or unsupported in the hardware. Change the mitigation reporting for these cases. Fixes: b8e8c8303ff2 ("kvm: mmu: ITLB_MULTIHIT mitigation") Reported-by: Nelson Dsouza <nelson.dsouza@linux.intel.com> Co-developed-by: Sean Christopherson <sean.j.christopherson@intel.com> Signed-off-by: Sean Christopherson <sean.j.christopherson@intel.com> Signed-off-by: Pawan Gupta <pawan.kumar.gupta@linux.intel.com> Signed-off-by: Ingo Molnar <mingo@kernel.org> Reviewed-by: Tony Luck <tony.luck@intel.com> Acked-by: Thomas Gleixner <tglx@linutronix.de> Link: https://lore.kernel.org/r/0ba029932a816179b9d14a30db38f0f11ef1f166.1594925782.git.pawan.kumar.gupta@linux.intel.com | 5 年前 | |
x86/bugs: Rename MDS machinery to something more generic mainline inclusion from mainline-v6.16-rc6 commit f9af88a3d384c8b55beb5dc5483e5da0135fadbd category: feature bugzilla: https://gitee.com/openeuler/kernel/issues/ICUIGI CVE: NA Reference: https://github.com/torvalds/linux/commit/f9af88a3d384c8b55beb5dc5483e5da0135fadbd -------------------------------- commit f9af88a3d384c8b55beb5dc5483e5da0135fadbd upstream It will be used by other x86 mitigations. No functional changes. Signed-off-by: Borislav Petkov (AMD) <bp@alien8.de> Reviewed-by: Pawan Gupta <pawan.kumar.gupta@linux.intel.com> Signed-off-by: PvsNarasimha <PVS.NarasimhaRao@amd.com> | 9 个月前 | |
Documentation/hw-vuln: Add documentation for RFDS stable inclusion from stable-v6.6.22 commit ddfd38558acc5b3891fd197372fedb76372da740 bugzilla: https://gitee.com/openeuler/kernel/issues/I99TJK Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=ddfd38558acc5b3891fd197372fedb76372da740 -------------------------------- commit 4e42765d1be01111df0c0275bbaf1db1acef346e upstream. Add the documentation for transient execution vulnerability Register File Data Sampling (RFDS) that affects Intel Atom CPUs. Signed-off-by: Pawan Gupta <pawan.kumar.gupta@linux.intel.com> Signed-off-by: Dave Hansen <dave.hansen@linux.intel.com> Reviewed-by: Thomas Gleixner <tglx@linutronix.de> Acked-by: Josh Poimboeuf <jpoimboe@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: ZhangPeng <zhangpeng362@huawei.com> | 2 年前 | |
x86/bugs: Add RSB mitigation document mainline inclusion from mainline-v6.15-rc2 commit 83f6665a49c3d44ad0c08f837d352dd290f5d10b category: feature bugzilla: https://atomgit.com/openeuler/kernel/issues/8403 CVE: NA Reference: https://github.com/torvalds/linux/commit/83f6665a49c3d44ad0c08f837d352dd290f5d10b -------------------------------- commit 83f6665a49c3d44ad0c08f837d352dd290f5d10b upstream Create a document to summarize hard-earned knowledge about RSB-related mitigations, with references, and replace the overly verbose yet incomplete comments with a reference to the document. Signed-off-by: Josh Poimboeuf <jpoimboe@kernel.org> Signed-off-by: Ingo Molnar <mingo@kernel.org> Link: https://lore.kernel.org/r/ab73f4659ba697a974759f07befd41ae605e33dd.1744148254.git.jpoimboe@kernel.org Signed-off-by: PvsNarasimha <PVS.NarasimhaRao@amd.com> | 4 个月前 | |
docs: admin-guide: hw-vuln: avoid using ReST :doc: foo markup The :doc:foo tag is auto-generated via automarkup.py. So, use the filename at the sources, instead of :doc:foo. Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org> Link: https://lore.kernel.org/r/4e378517761f3df07165d5ecdac5a0a81577e68f.1623824363.git.mchehab+huawei@kernel.org Signed-off-by: Jonathan Corbet <corbet@lwn.net> | 5 年前 | |
x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto stable inclusion from stable-v6.6.28 commit a823da65dce81d8ac6094a08c7079638a52d6953 bugzilla: https://gitee.com/openeuler/kernel/issues/I9MPZ8 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=a823da65dce81d8ac6094a08c7079638a52d6953 -------------------------------- commit 36d4fe147c870f6d3f6602befd7ef44393a1c87a upstream. Unlike most other mitigations' "auto" options, spectre_bhi=auto only mitigates newer systems, which is confusing and not particularly useful. Remove it. Signed-off-by: Josh Poimboeuf <jpoimboe@kernel.org> Signed-off-by: Ingo Molnar <mingo@kernel.org> Reviewed-by: Nikolay Borisov <nik.borisov@suse.com> Cc: Sean Christopherson <seanjc@google.com> Cc: Linus Torvalds <torvalds@linux-foundation.org> Link: https://lore.kernel.org/r/412e9dc87971b622bbbaf64740ebc1f140bff343.1712813475.git.jpoimboe@kernel.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: ZhangPeng <zhangpeng362@huawei.com> | 2 年前 | |
x86/hw-vuln:Support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS to avoid performance degradation caused by software-based mitigation. hygon inclusion category: feature bugzilla: https://atomgit.com/openeuler/kernel/issues/8448 CVE: NA ------------------ Hygon IBRS is different from AMD's Auto IBRS. It mitigates vulnerabilities based on the predicted branch type rather than the actual branch type; therefore, it can mitigate both Retbleed and SRSO by preventing predicted branch types from being used in the kernel. We leverage Hygon IBRS for Retbleed and SRSO mitigation, which avoids the performance degradation caused by software-based mitigation methods. The original default function of IBPB only flushes indirect branch entries in the Branch Target Buffer; however, it cannot mitigate user-to-user SRSO attacks, which can be launched via direct branches from one user task to another. We modify IBPB's default behavior to flush all branch types (including direct branches) during task switching, thereby achieving complete mitigation. We also provide a command-line interface to disable this default configuration if the risk of such attacks is not high. Users can then leverage this interface to select the appropriate configuration by balancing security risks against performance costs. Signed-off-by: zhangjun <zhangjun@hygon.cn> | 5 个月前 | |
docs: move x86 documentation into Documentation/arch/ Move the x86 documentation under Documentation/arch/ as a way of cleaning up the top-level directory and making the structure of our docs more closely match the structure of the source directories it describes. All in-kernel references to the old paths have been updated. Acked-by: Dave Hansen <dave.hansen@linux.intel.com> Cc: linux-arch@vger.kernel.org Cc: x86@kernel.org Cc: Borislav Petkov <bp@alien8.de> Cc: Thomas Gleixner <tglx@linutronix.de> Link: https://lore.kernel.org/lkml/20230315211523.108836-1-corbet@lwn.net/ Signed-off-by: Jonathan Corbet <corbet@lwn.net> | 3 年前 | |
Documentation/hw-vuln: Add VMSCAPE documentation stable inclusion from stable-v6.6.106 commit 9d1677060428c178385ac0ee984a9937490c81df category: bugfix bugzilla: https://atomgit.com/openeuler/kernel/issues/8498 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=9d1677060428c178385ac0ee984a9937490c81df -------------------------------- Commit 9969779d0803f5dcd4460ae7aca2bc3fd91bff12 upstream. VMSCAPE is a vulnerability that may allow a guest to influence the branch prediction in host userspace, particularly affecting hypervisors like QEMU. Add the documentation. Signed-off-by: Pawan Gupta <pawan.kumar.gupta@linux.intel.com> Signed-off-by: Dave Hansen <dave.hansen@linux.intel.com> Reviewed-by: Borislav Petkov (AMD) <bp@alien8.de> Reviewed-by: Dave Hansen <dave.hansen@linux.intel.com> Signed-off-by: Borislav Petkov (AMD) <bp@alien8.de> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 9d1677060428c178385ac0ee984a9937490c81df) Signed-off-by: Wentao Guan <guanwentao@uniontech.com> | 5 个月前 |
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
| 2 年前 | ||
| 3 年前 | ||
| 2 年前 | ||
| 4 个月前 | ||
| 8 个月前 | ||
| 4 年前 | ||
| 6 年前 | ||
| 3 年前 | ||
| 5 年前 | ||
| 9 个月前 | ||
| 2 年前 | ||
| 4 个月前 | ||
| 5 年前 | ||
| 2 年前 | ||
| 5 个月前 | ||
| 3 年前 | ||
| 5 个月前 |