Commits · 6720aabf994069a3ea412df4c1452bfac0f8f492 · Kirill Smelkov / linux

05 Feb, 2018 33 commits

Revert "x86/mm: Set IBPB upon context switch" · 6720aabf

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit 49bb7a3c.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

6720aabf

Revert "x86/mm: Only set IBPB when the new thread cannot ptrace current thread" · 260de686

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit b0c3e8bd.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

260de686

Revert "x86/entry: Stuff RSB for entry to kernel for non-SMEP platform" · a6fa5ed0

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit 47a07600.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

a6fa5ed0

Revert "x86/kvm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD to kvm" · 30fd5229

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit 70be2dd8.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

30fd5229

Revert "x86/kvm: Set IBPB when switching VM" · ac0d4eae

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit 30907f82.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

ac0d4eae

Revert "x86/kvm: Toggle IBRS on VM entry and exit" · ceea78e2

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit e233ec08.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

ceea78e2

Revert "x86/kvm: Pad RSB on VM transition" · 55600a10

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit ba5013cf.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

55600a10

Revert "x86/spec_ctrl: Add sysctl knobs to enable/disable SPEC_CTRL feature" · b3685465

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit 5e7fa023.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

b3685465

Revert "x86/spec_ctrl: Add lock to serialize changes to ibrs and ibpb control" · 1089af8d

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit ff2699c9.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

1089af8d

Revert "x86/syscall: Clear unused extra registers on syscall entrance" · 6f3f333c

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit 0f76330e.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

6f3f333c

Revert "x86/syscall: Clear unused extra registers on 32-bit compatible syscall entrance" · b1c038b1

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit 70df98e2.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

b1c038b1

Revert "x86/entry: Use retpoline for syscall's indirect calls" · 684a6a68

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit f3fd3c0a.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

684a6a68

Revert "x86/cpu/amd, kvm: Satisfy guest kernel reads of IC_CFG MSR" · b4385abd

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit 44c314e1.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

b4385abd

Revert "x86/cpu/AMD: Add speculative control support for AMD" · 688d5160

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit 0c42069d.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

688d5160

Revert "x86/microcode: Extend post microcode reload to support IBPB feature" · a9a8b5fa

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit 88b00371.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

a9a8b5fa

Revert "KVM: SVM: Do not intercept new speculative control MSRs" · b094e69c

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit 750beb6c.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

b094e69c

Revert "x86/svm: Set IBRS value on VM entry and exit" · 4347e8cd

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit d3d0f0a2.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

4347e8cd

Revert "x86/svm: Set IBPB when running a different VCPU" · 7dc92117

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit 8c36ea34.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

7dc92117

Revert "KVM: x86: Add speculative control CPUID support for guests" · ef09993f

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit 8339cae2.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

ef09993f

Revert "x86/svm: Add code to clobber the RSB on VM exit" · 6ef9b7c8

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit b554560f.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

6ef9b7c8

Revert "x86/svm: Add code to clear registers on VM exit" · c41c9703

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit a1c61c3a.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

c41c9703

Revert "x86/cpu/AMD: Make the LFENCE instruction serialized" · c7888374

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit 92763281.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

c7888374

Revert "x86/cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature" · 0521946e

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit 844132fe.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

0521946e

Revert "powerpc: add gmb barrier" · 50e3470e

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit b6ea5c00.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

50e3470e

Revert "s390/spinlock: add gmb memory barrier" · fd13dba7

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit 087580bf.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

fd13dba7

Revert "UBUNTU: SAUCE: x86/kvm: Fix stuff_RSB() for 32-bit" · ec2f7a85

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit e8d5c968.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

ec2f7a85

Revert "arm64: no gmb() implementation yet" · 35c9a81c

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit 4e1b8db1.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

35c9a81c

Revert "arm: no gmb() implementation yet" · 0038751c

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit bf2fe22f.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

0038751c

Revert "UBUNTU: SAUCE: x86/microcode: Extend post microcode reload to support... · fb79fa3f

Andy Whitcroft authored Jan 31, 2018

Revert "UBUNTU: SAUCE: x86/microcode: Extend post microcode reload to support IBPB feature -- repair missmerge"

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit 06afd4f0.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

fb79fa3f

Revert "Revert "x86/svm: Add code to clear registers on VM exit"" · f6e803bb

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit fc26acce.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

f6e803bb

Revert "kvm: vmx: Scrub hardware GPRs at VM-exit" · eb7b4d9b

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit 6f13941a.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

eb7b4d9b

Revert "x86/cpuid: Provide get_scattered_cpuid_leaf()" · d79ad9c8

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit 36c867e8.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

d79ad9c8

Revert "UBUNTU: SAUCE: Fix spec_ctrl support in KVM" · 742a2c5a

Andy Whitcroft authored Jan 31, 2018

CVE-2017-5753 (revert embargoed)
CVE-2017-5715 (revert embargoed)

This reverts commit 86d33097.
Signed-off-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

742a2c5a

02 Feb, 2018 1 commit

net: ipv4: fix for a race condition in raw_sendmsg · 63da13a9

Mohamed Ghannam authored Dec 10, 2017

inet->hdrincl is racy, and could lead to uninitialized stack pointer
usage, so its value should be read only once.

Fixes: c008ba5b ("ipv4: Avoid reading user iov twice after raw_probe_proto_opt")
Signed-off-by: Mohamed Ghannam <simo.ghannam@gmail.com>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

CVE-2017-17712
(backported from commit 8f659a03 upstream)
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>
Acked-by: Khalid Elmously <khalid.elmously@canonical.com>
Acked-by: Colin Ian King <colin.king@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

63da13a9

29 Jan, 2018 1 commit

UBUNTU: [Packaging] update urgency to medium by default · 355335ee

Andy Whitcroft authored Jan 25, 2018

BugLink: http://bugs.launchpad.net/bugs/1745338Signed-off-by: Andy Whitcroft <apw@canonical.com>
Acked-by: Colin Ian King <colin.king@canonical.com>
Acked-by: Seth Forshee <seth.forshee@canonical.com>
Acked-by: Kamal Mostafa <kamal@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

355335ee

23 Jan, 2018 5 commits

more bio_map_user_iov() leak fixes · dc41cd4a

Al Viro authored Dec 08, 2017

we need to take care of failure exit as well - pages already
in bio should be dropped by analogue of bio_unmap_pages(),
since their refcounts had been bumped only once per reference
in bio.

Cc: stable@vger.kernel.org
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>

CVE-CVE-2017-12190
(backported from commit 2b04e8f6)
[klebers: page_cache_release() is defined as put_page(), but keep it as
 page_cache_release() for consistency with the rest of the code.]
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>
Acked-by: Stefan Bader <stefan.bader@canonical.com>
Acked-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>
Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>

dc41cd4a

mbcache: add reusable flag to cache entries · 63cf10be

Andreas Gruenbacher authored Nov 16, 2017

To reduce amount of damage caused by single bad block, we limit number
of inodes sharing an xattr block to 1024. Thus there can be more xattr
blocks with the same contents when there are lots of files with the same
extended attributes. These xattr blocks naturally result in hash
collisions and can form long hash chains and we unnecessarily check each
such block only to find out we cannot use it because it is already
shared by too many inodes.

Add a reusable flag to cache entries which is cleared when a cache entry
has reached its maximum refcount.  Cache entries which are not marked
reusable are skipped by mb_cache_entry_find_{first,next}. This
significantly speeds up mbcache when there are many same xattr blocks.
For example for xattr-bench with 5 values and each process handling
20000 files, the run for 64 processes is 25x faster with this patch.
Even for 8 processes the speedup is almost 3x. We have also verified
that for situations where there is only one xattr block of each kind,
the patch doesn't have a measurable cost.

[JK: Remove handling of setting the same value since it is not needed
anymore, check for races in e_reusable setting, improve changelog,
add measurements]
Signed-off-by: Andreas Gruenbacher <agruenba@redhat.com>
Signed-off-by: Jan Kara <jack@suse.cz>
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
(cherry picked from commit 6048c64b)
CVE-2015-8952
Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>
Acked-by: Stefan Bader <stefan.bader@canonical.com>
Acked-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>
Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>

63cf10be

mbcache: get rid of _e_hash_list_head · ad60cf6a

Andreas Gruenbacher authored Nov 16, 2017

Get rid of field _e_hash_list_head in cache entries and add bit field
e_referenced instead.
Signed-off-by: Andreas Gruenbacher <agruenba@redhat.com>
Signed-off-by: Jan Kara <jack@suse.cz>
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
(cherry picked from commit dc8d5e56)
CVE-2015-8952
Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>
Acked-by: Stefan Bader <stefan.bader@canonical.com>
Acked-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>
Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>

ad60cf6a

mbcache2: rename to mbcache · 1cf1f661

Jan Kara authored Nov 16, 2017

Since old mbcache code is gone, let's rename new code to mbcache since
number 2 is now meaningless. This is just a mechanical replacement.
Signed-off-by: Jan Kara <jack@suse.cz>
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
(cherry picked from commit 7a2508e1)
CVE-2015-8952
Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>
Acked-by: Stefan Bader <stefan.bader@canonical.com>
Acked-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>
Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>

1cf1f661

mbcache: remove mbcache · b876cd14

Jan Kara authored Nov 16, 2017

Both ext2 and ext4 are now converted to mbcache2. Remove the old mbcache
code.
Signed-off-by: Jan Kara <jack@suse.cz>
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
(cherry picked from commit ecd1e644)
CVE-2015-8952
Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>
Acked-by: Stefan Bader <stefan.bader@canonical.com>
Acked-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>
Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>

b876cd14