Received: by 2002:ac0:da4c:0:0:0:0:0 with SMTP id a12csp453751imi; Fri, 22 Jul 2022 02:43:22 -0700 (PDT) X-Google-Smtp-Source: AGRyM1uPZojrlRZxkKNixYzitjwIgBwVSBDpnSJQrouJ36P62+pe4nE98KaD+XKlBvtZbAS1H5DI X-Received: by 2002:a17:903:22d0:b0:16d:20f6:b859 with SMTP id y16-20020a17090322d000b0016d20f6b859mr2690343plg.2.1658483002736; Fri, 22 Jul 2022 02:43:22 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1658483002; cv=none; d=google.com; s=arc-20160816; b=gP+zoATVV2M6NAnAFBVvny+/FwVHRGZ2qoXqve7qyUK3tQBqNI7Z3w0nPm5KK3IAQZ bZkES0n15kEBIwkm2NCkE0F/58BlXhDRCqm6jSd+hEk4XmPbzpxskrsmjeZNy3f+eHBT BmJyvOliFb6jrDfDvlsv6XjUMHGOuvuGePqTpooIYkl0tqMLmqpopYtcxXpSgQZF9hm5 cWTQBR1uea+QMBLfU53x8uKGTRRsDAwevNyFdMIM78to6Ufb4jyqEjLmI12kBnbeMYLM 7wNE5Rb4KSVr4Nif97rrYyd8tXSbBkUa9oIh1L0naS2Xy5/lvnhgrgUrLLpH4itK/SQC 1bXg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:user-agent :mime-version:message-id:date:subject:cc:to:from:dkim-signature; bh=L0R5OjfGGUp6O/CiuCWqJtTjCon4BVvu9Sy0dnCZ+VY=; b=kU8UaDYMOQkzmv75UZMTYrGI1f5ca0/XIQukbAzo4RGzfCqmGt8o4+sl7hRQihqMrE p0RBirG8g2MBLlLoj066tM2FZDOCEYnLE1XEXTXnpY6BOUieiKRKIfZPcatPxP/irQPo 4qhUyU1nKlvwgktxYZ4YSYkO/qoeDMXelavBpcxtmp+8cO1g8s1pqZPUycolXXNVkXdg 0eifkNm3bN2SGASR7XknM/jh9Ya4IZApLL+D6RotHEsQFVaJ/x1u+fpCF1/f4JIUCbj+ eJhrYbF2YMaCgDmeZfIeLS89dzJHyZVIkUaNwKd1eOykj/XruEw0cGeLNso+3/s++JGC l0/g== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@linuxfoundation.org header.s=korg header.b=h8+FGnmn; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=linuxfoundation.org Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id g8-20020a170902740800b0016382c70069si5066937pll.150.2022.07.22.02.43.08; Fri, 22 Jul 2022 02:43:22 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@linuxfoundation.org header.s=korg header.b=h8+FGnmn; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=linuxfoundation.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S235144AbiGVJJC (ORCPT + 99 others); Fri, 22 Jul 2022 05:09:02 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:38858 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S234595AbiGVJIm (ORCPT ); Fri, 22 Jul 2022 05:08:42 -0400 Received: from ams.source.kernel.org (ams.source.kernel.org [IPv6:2604:1380:4601:e00::1]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id E87F1820FD; Fri, 22 Jul 2022 02:08:39 -0700 (PDT) Received: from smtp.kernel.org (relay.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ams.source.kernel.org (Postfix) with ESMTPS id A1F98B827BC; Fri, 22 Jul 2022 09:08:38 +0000 (UTC) Received: by smtp.kernel.org (Postfix) with ESMTPSA id D5200C341C6; Fri, 22 Jul 2022 09:08:36 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1658480917; bh=18rEMBpzi6zCSncP24mZKJB352vo/J6cwdVM9MybYSg=; h=From:To:Cc:Subject:Date:From; b=h8+FGnmnxcRMw3AdDDYVc03bwTGghjJwC7lFUc1DdSI/G+vL3gENPV5v5BuI40fhq 0Gor3zOi++DaLGYpEiL6q9jaSOS/bsCYjyPi96w7GVgcw8sETW5TeW8DCjoKgQoxCK W9rmvO6sVG9CKDfLgd52bFhpdAzDWIVYNeWz2LnM= From: Greg Kroah-Hartman To: linux-kernel@vger.kernel.org Cc: Greg Kroah-Hartman , stable@vger.kernel.org, torvalds@linux-foundation.org, akpm@linux-foundation.org, linux@roeck-us.net, shuah@kernel.org, patches@kernelci.org, lkft-triage@lists.linaro.org, pavel@denx.de, jonathanh@nvidia.com, f.fainelli@gmail.com, sudipm.mukherjee@gmail.com, slade@sladewatkins.com Subject: [PATCH 5.18 00/70] 5.18.14-rc1 review Date: Fri, 22 Jul 2022 11:06:55 +0200 Message-Id: <20220722090650.665513668@linuxfoundation.org> X-Mailer: git-send-email 2.37.1 MIME-Version: 1.0 User-Agent: quilt/0.66 X-stable: review X-Patchwork-Hint: ignore X-KernelTest-Patch: http://kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.18.14-rc1.gz X-KernelTest-Tree: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git X-KernelTest-Branch: linux-5.18.y X-KernelTest-Patches: git://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git X-KernelTest-Version: 5.18.14-rc1 X-KernelTest-Deadline: 2022-07-24T09:06+00:00 Content-Transfer-Encoding: 8bit X-Spam-Status: No, score=-7.8 required=5.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_HI, SPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org This is the start of the stable review cycle for the 5.18.14 release. There are 70 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun, 24 Jul 2022 09:06:00 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.18.14-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman Linux 5.18.14-rc1 Peter Zijlstra um: Add missing apply_returns() Kim Phillips x86/bugs: Remove apostrophe typo Arnaldo Carvalho de Melo tools headers cpufeatures: Sync with the kernel sources Arnaldo Carvalho de Melo tools arch x86: Sync the msr-index.h copy with the kernel sources Paolo Bonzini KVM: emulate: do not adjust size of fastop and setcc subroutines Thadeu Lima de Souza Cascardo x86/kvm: fix FASTOP_SIZE when return thunks are enabled Thadeu Lima de Souza Cascardo efi/x86: use naked RET on mixed mode call wrapper Nathan Chancellor x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current Jiri Slaby x86/asm/32: Fix ANNOTATE_UNRET_SAFE use on 32-bit Thomas Gleixner x86/static_call: Serialize __static_call_fixup() properly Pawan Gupta x86/speculation: Disable RRSBA behavior Konrad Rzeszutek Wilk x86/kexec: Disable RET on kexec Thadeu Lima de Souza Cascardo x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported Peter Zijlstra x86/entry: Move PUSH_AND_CLEAR_REGS() back into error_entry Pawan Gupta x86/bugs: Add Cannon lake to RETBleed affected CPU list Peter Zijlstra x86/retbleed: Add fine grained Kconfig knobs Andrew Cooper x86/cpu/amd: Enumerate BTC_NO Peter Zijlstra x86/common: Stamp out the stepping madness Josh Poimboeuf KVM: VMX: Prevent RSB underflow before vmenter Josh Poimboeuf x86/speculation: Fill RSB on vmexit for IBRS Josh Poimboeuf KVM: VMX: Fix IBRS handling after vmexit Josh Poimboeuf KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS Josh Poimboeuf KVM: VMX: Convert launched argument to flags Josh Poimboeuf KVM: VMX: Flatten __vmx_vcpu_run() Josh Poimboeuf objtool: Re-add UNWIND_HINT_{SAVE_RESTORE} Josh Poimboeuf x86/speculation: Remove x86_spec_ctrl_mask Josh Poimboeuf x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit Josh Poimboeuf x86/speculation: Fix SPEC_CTRL write on SMT state change Josh Poimboeuf x86/speculation: Fix firmware entry SPEC_CTRL handling Josh Poimboeuf x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n Peter Zijlstra x86/cpu/amd: Add Spectral Chicken Thadeu Lima de Souza Cascardo objtool: Add entry UNRET validation Josh Poimboeuf x86/bugs: Do IBPB fallback check only once Peter Zijlstra x86/bugs: Add retbleed=ibpb Peter Zijlstra x86/xen: Add UNTRAIN_RET Peter Zijlstra x86/xen: Rename SYS* entry points Peter Zijlstra objtool: Update Retpoline validation Peter Zijlstra intel_idle: Disable IBRS during long idle Peter Zijlstra x86/bugs: Report Intel retbleed vulnerability Peter Zijlstra x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation() Pawan Gupta x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS Peter Zijlstra x86/bugs: Optimize SPEC_CTRL MSR writes Thadeu Lima de Souza Cascardo x86/entry: Add kernel IBRS implementation Peter Zijlstra x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value Kim Phillips x86/bugs: Enable STIBP for JMP2RET Alexandre Chartre x86/bugs: Add AMD retbleed= boot parameter Alexandre Chartre x86/bugs: Report AMD retbleed vulnerability Thadeu Lima de Souza Cascardo x86: Add magic AMD return-thunk Peter Zijlstra objtool: Treat .text.__x86.* as noinstr Peter Zijlstra x86/entry: Avoid very early RET Peter Zijlstra x86: Use return-thunk in asm code Kim Phillips x86/sev: Avoid using __x86_return_thunk Peter Zijlstra x86/vsyscall_emu/64: Don't use RET in vsyscall emulation Peter Zijlstra x86/kvm: Fix SETcc emulation for return thunks Peter Zijlstra x86/bpf: Use alternative RET encoding Peter Zijlstra x86/ftrace: Use alternative RET encoding Peter Zijlstra x86,static_call: Use alternative RET encoding Thadeu Lima de Souza Cascardo objtool: skip non-text sections when adding return-thunk sites Peter Zijlstra x86,objtool: Create .return_sites Peter Zijlstra x86: Undo return-thunk damage Peter Zijlstra x86/retpoline: Use -mfunction-return Peter Zijlstra x86/retpoline: Swizzle retpoline thunk Peter Zijlstra x86/retpoline: Cleanup some #ifdefery Peter Zijlstra x86/cpufeatures: Move RETPOLINE flags to word 11 Peter Zijlstra x86/kvm/vmx: Make noinstr clean Peter Zijlstra x86/entry: Remove skip_r11rcx Lai Jiangshan x86/entry: Don't call error_entry() for XENPV Lai Jiangshan x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry() Lai Jiangshan x86/entry: Switch the stack after error_entry() returns Lai Jiangshan x86/traps: Use pt_regs directly in fixup_bad_iret() ------------- Diffstat: Documentation/admin-guide/kernel-parameters.txt | 25 ++ Makefile | 4 +- arch/um/kernel/um_arch.c | 4 + arch/x86/Kconfig | 103 +++-- arch/x86/Makefile | 6 + arch/x86/entry/Makefile | 2 +- arch/x86/entry/calling.h | 72 +++- arch/x86/entry/entry.S | 22 ++ arch/x86/entry/entry_32.S | 2 - arch/x86/entry/entry_64.S | 88 ++++- arch/x86/entry/entry_64_compat.S | 21 +- arch/x86/entry/vdso/Makefile | 1 + arch/x86/entry/vsyscall/vsyscall_emu_64.S | 9 +- arch/x86/include/asm/alternative.h | 1 + arch/x86/include/asm/cpufeatures.h | 12 +- arch/x86/include/asm/disabled-features.h | 21 +- arch/x86/include/asm/linkage.h | 8 + arch/x86/include/asm/msr-index.h | 13 + arch/x86/include/asm/nospec-branch.h | 69 +++- arch/x86/include/asm/static_call.h | 19 +- arch/x86/include/asm/traps.h | 2 +- arch/x86/include/asm/unwind_hints.h | 14 +- arch/x86/kernel/alternative.c | 69 ++++ arch/x86/kernel/asm-offsets.c | 6 + arch/x86/kernel/cpu/amd.c | 46 ++- arch/x86/kernel/cpu/bugs.c | 475 ++++++++++++++++++++---- arch/x86/kernel/cpu/common.c | 61 +-- arch/x86/kernel/cpu/cpu.h | 2 + arch/x86/kernel/cpu/hygon.c | 6 + arch/x86/kernel/cpu/scattered.c | 1 + arch/x86/kernel/ftrace.c | 7 +- arch/x86/kernel/head_32.S | 1 + arch/x86/kernel/head_64.S | 5 + arch/x86/kernel/module.c | 8 +- arch/x86/kernel/process.c | 2 +- arch/x86/kernel/relocate_kernel_32.S | 25 +- arch/x86/kernel/relocate_kernel_64.S | 23 +- arch/x86/kernel/static_call.c | 51 ++- arch/x86/kernel/traps.c | 19 +- arch/x86/kernel/vmlinux.lds.S | 9 +- arch/x86/kvm/emulate.c | 35 +- arch/x86/kvm/svm/vmenter.S | 18 + arch/x86/kvm/vmx/capabilities.h | 4 +- arch/x86/kvm/vmx/nested.c | 2 +- arch/x86/kvm/vmx/run_flags.h | 8 + arch/x86/kvm/vmx/vmenter.S | 194 ++++++---- arch/x86/kvm/vmx/vmx.c | 84 +++-- arch/x86/kvm/vmx/vmx.h | 10 +- arch/x86/kvm/vmx/vmx_ops.h | 2 +- arch/x86/kvm/x86.c | 4 +- arch/x86/lib/memmove_64.S | 7 +- arch/x86/lib/retpoline.S | 79 +++- arch/x86/mm/mem_encrypt_boot.S | 10 +- arch/x86/net/bpf_jit_comp.c | 26 +- arch/x86/platform/efi/efi_thunk_64.S | 5 +- arch/x86/xen/setup.c | 6 +- arch/x86/xen/xen-asm.S | 30 +- arch/x86/xen/xen-head.S | 1 + arch/x86/xen/xen-ops.h | 6 +- drivers/base/cpu.c | 8 + drivers/idle/intel_idle.c | 44 ++- include/linux/cpu.h | 2 + include/linux/kvm_host.h | 2 +- include/linux/objtool.h | 9 +- scripts/Makefile.build | 1 + scripts/link-vmlinux.sh | 3 + security/Kconfig | 11 - tools/arch/x86/include/asm/cpufeatures.h | 12 +- tools/arch/x86/include/asm/disabled-features.h | 21 +- tools/arch/x86/include/asm/msr-index.h | 13 + tools/include/linux/objtool.h | 9 +- tools/objtool/arch/x86/decode.c | 5 + tools/objtool/builtin-check.c | 4 +- tools/objtool/check.c | 331 ++++++++++++++++- tools/objtool/include/objtool/arch.h | 1 + tools/objtool/include/objtool/builtin.h | 2 +- tools/objtool/include/objtool/check.h | 24 +- tools/objtool/include/objtool/elf.h | 1 + tools/objtool/include/objtool/objtool.h | 1 + tools/objtool/objtool.c | 1 + 80 files changed, 1937 insertions(+), 433 deletions(-)