This is a note to let you know that I've just added the patch titled x86/entry: Move PUSH_AND_CLEAR_REGS() back into error_entry to the 5.18-stable tree which can be found at: http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary The filename of the patch is: x86-entry-move-push_and_clear_regs-back-into-error_entry.patch and it can be found in the queue-5.18 subdirectory. If you, or anyone else, feels it should not be added to the stable tree, please let <stable@xxxxxxxxxxxxxxx> know about it. >From foo@baz Tue Jul 12 05:03:58 PM CEST 2022 From: Peter Zijlstra <peterz@xxxxxxxxxxxxx> Date: Wed, 6 Jul 2022 15:33:30 +0200 Subject: x86/entry: Move PUSH_AND_CLEAR_REGS() back into error_entry From: Peter Zijlstra <peterz@xxxxxxxxxxxxx> commit 2c08b9b38f5b0f4a6c2d29be22b695e4ec4a556b upstream. Commit ee774dac0da1 ("x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry()") moved PUSH_AND_CLEAR_REGS out of error_entry, into its own function, in part to avoid calling error_entry() for XenPV. However, commit 7c81c0c9210c ("x86/entry: Avoid very early RET") had to change that because the 'ret' was too early and moved it into idtentry, bloating the text size, since idtentry is expanded for every exception vector. However, with the advent of xen_error_entry() in commit d147553b64bad ("x86/xen: Add UNTRAIN_RET") it became possible to remove PUSH_AND_CLEAR_REGS from idtentry, back into *error_entry(). Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx> Signed-off-by: Borislav Petkov <bp@xxxxxxx> [cascardo: error_entry still does cld] Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@xxxxxxxxxxxxx> Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> --- arch/x86/entry/entry_64.S | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) --- a/arch/x86/entry/entry_64.S +++ b/arch/x86/entry/entry_64.S @@ -323,6 +323,8 @@ SYM_CODE_END(ret_from_fork) SYM_CODE_START_LOCAL(xen_error_entry) UNWIND_HINT_FUNC + PUSH_AND_CLEAR_REGS save_ret=1 + ENCODE_FRAME_POINTER 8 UNTRAIN_RET RET SYM_CODE_END(xen_error_entry) @@ -334,9 +336,6 @@ SYM_CODE_END(xen_error_entry) */ .macro idtentry_body cfunc has_error_code:req - PUSH_AND_CLEAR_REGS - ENCODE_FRAME_POINTER - /* * Call error_entry() and switch to the task stack if from userspace. * @@ -1035,6 +1034,10 @@ SYM_CODE_END(paranoid_exit) SYM_CODE_START_LOCAL(error_entry) UNWIND_HINT_FUNC cld + + PUSH_AND_CLEAR_REGS save_ret=1 + ENCODE_FRAME_POINTER 8 + testb $3, CS+8(%rsp) jz .Lerror_kernelspace Patches currently in stable-queue which might be from peterz@xxxxxxxxxxxxx are queue-5.18/x86-sev-avoid-using-__x86_return_thunk.patch queue-5.18/kvm-vmx-prevent-rsb-underflow-before-vmenter.patch queue-5.18/x86-ftrace-use-alternative-ret-encoding.patch queue-5.18/objtool-re-add-unwind_hint_-save_restore.patch queue-5.18/x86-bugs-add-retbleed-ibpb.patch queue-5.18/x86-bugs-enable-stibp-for-jmp2ret.patch queue-5.18/x86-retpoline-cleanup-some-ifdefery.patch queue-5.18/kvm-vmx-flatten-__vmx_vcpu_run.patch queue-5.18/x86-kvm-vmx-make-noinstr-clean.patch queue-5.18/x86-retbleed-add-fine-grained-kconfig-knobs.patch queue-5.18/x86-cpu-amd-add-spectral-chicken.patch queue-5.18/kvm-vmx-fix-ibrs-handling-after-vmexit.patch queue-5.18/kvm-vmx-prevent-guest-rsb-poisoning-attacks-with-eibrs.patch queue-5.18/x86-vsyscall_emu-64-don-t-use-ret-in-vsyscall-emulation.patch queue-5.18/x86-add-magic-amd-return-thunk.patch queue-5.18/x86-bugs-keep-a-per-cpu-ia32_spec_ctrl-value.patch queue-5.18/x86-objtool-create-.return_sites.patch queue-5.18/x86-kvm-fix-setcc-emulation-for-return-thunks.patch queue-5.18/x86-retpoline-swizzle-retpoline-thunk.patch queue-5.18/x86-speculation-fix-firmware-entry-spec_ctrl-handling.patch queue-5.18/x86-speculation-add-spectre_v2-ibrs-option-to-support-kernel-ibrs.patch queue-5.18/x86-xen-add-untrain_ret.patch queue-5.18/x86-undo-return-thunk-damage.patch queue-5.18/x86-entry-avoid-very-early-ret.patch queue-5.18/x86-entry-move-push_and_clear_regs-back-into-error_entry.patch queue-5.18/x86-speculation-fill-rsb-on-vmexit-for-ibrs.patch queue-5.18/objtool-add-entry-unret-validation.patch queue-5.18/kvm-vmx-convert-launched-argument-to-flags.patch queue-5.18/x86-bpf-use-alternative-ret-encoding.patch queue-5.18/x86-common-stamp-out-the-stepping-madness.patch queue-5.18/x86-bugs-split-spectre_v2_select_mitigation-and-spectre_v2_user_select_mitigation.patch queue-5.18/x86-bugs-report-intel-retbleed-vulnerability.patch queue-5.18/x86-cpufeatures-move-retpoline-flags-to-word-11.patch queue-5.18/x86-speculation-fix-spec_ctrl-write-on-smt-state-change.patch queue-5.18/x86-retpoline-use-mfunction-return.patch queue-5.18/x86-xen-rename-sys-entry-points.patch queue-5.18/x86-bugs-optimize-spec_ctrl-msr-writes.patch queue-5.18/x86-bugs-report-amd-retbleed-vulnerability.patch queue-5.18/x86-static_call-use-alternative-ret-encoding.patch queue-5.18/x86-speculation-fix-rsb-filling-with-config_retpoline-n.patch queue-5.18/x86-use-return-thunk-in-asm-code.patch queue-5.18/intel_idle-disable-ibrs-during-long-idle.patch queue-5.18/x86-entry-remove-skip_r11rcx.patch queue-5.18/x86-speculation-use-cached-host-spec_ctrl-value-for-guest-entry-exit.patch queue-5.18/x86-bugs-add-amd-retbleed-boot-parameter.patch queue-5.18/x86-entry-add-kernel-ibrs-implementation.patch queue-5.18/objtool-treat-.text.__x86.-as-noinstr.patch queue-5.18/objtool-update-retpoline-validation.patch