This is a note to let you know that I've just added the patch titled
x86: set SPECTRE_BHI_ON as default
to the 6.8-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
x86-set-spectre_bhi_on-as-default.patch
and it can be found in the queue-6.8 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree,
please let <stable@xxxxxxxxxxxxxxx> know about it.
>From foo@baz Tue Apr 9 07:32:41 PM CEST 2024
Date: Tue, 09 Apr 2024 19:32:41 +0200
To: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Subject: x86: set SPECTRE_BHI_ON as default
commit 2bb69f5fc72183e1c62547d900f560d0e9334925 upstream.
Part of a merge commit from Linus that adjusted the default setting of
SPECTRE_BHI_ON.
Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
---
arch/x86/Kconfig | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
--- a/arch/x86/Kconfig
+++ b/arch/x86/Kconfig
@@ -2615,7 +2615,7 @@ config MITIGATION_RFDS
choice
prompt "Clear branch history"
depends on CPU_SUP_INTEL
- default SPECTRE_BHI_AUTO
+ default SPECTRE_BHI_ON
help
Enable BHI mitigations. BHI attacks are a form of Spectre V2 attacks
where the branch history buffer is poisoned to speculatively steer
Patches currently in stable-queue which might be from gregkh@xxxxxxxxxxxxxxxxxxx are
queue-6.8/x86-bpf-fix-ip-after-emitting-call-depth-accounting.patch
queue-6.8/asoc-sof-intel-hda-implement-get_stream_position-linear-link-position.patch
queue-6.8/ipv6-fix-infinite-recursion-in-fib6_dump_done.patch
queue-6.8/netfilter-nf_tables-release-batch-on-table-validation-from-abort-path.patch
queue-6.8/r8169-skip-dash-fw-status-checks-when-dash-is-disabled.patch
queue-6.8/x86-bhi-define-spec_ctrl_bhi_dis_s.patch
queue-6.8/bpf-sockmap-prevent-lock-inversion-deadlock-in-map-delete-elem.patch
queue-6.8/io_uring-rw-don-t-allow-multishot-reads-without-nowait-support.patch
queue-6.8/idpf-fix-kernel-panic-on-unknown-packet-types.patch
queue-6.8/vboxsf-avoid-an-spurious-warning-if-load_nls_xxx-fails.patch
queue-6.8/asoc-sof-intel-mtl-lnl-use-the-generic-get_stream_position-callback.patch
queue-6.8/i40e-fix-vf-mac-filter-removal.patch
queue-6.8/x86-cpufeatures-add-new-word-for-scattered-features.patch
queue-6.8/x86-retpoline-add-noendbr-annotation-to-the-srso-dummy-return-thunk.patch
queue-6.8/asoc-sof-add-dsp_max_burst_size_in_ms-member-to-snd_sof_pcm_stream.patch
queue-6.8/net-dsa-mv88e6xxx-fix-usable-ports-on-88e6020.patch
queue-6.8/ksmbd-don-t-send-oplock-break-if-rename-fails.patch
queue-6.8/io_uring-use-private-workqueue-for-exit-work.patch
queue-6.8/of-dynamic-synchronize-of_changeset_destroy-with-the-devlink-removals.patch
queue-6.8/gpio-cdev-fix-missed-label-sanitizing-in-debounce_setup.patch
queue-6.8/tcp-fix-bind-regression-for-v6-only-wildcard-and-v4-mapped-v6-non-wildcard-addresses.patch
queue-6.8/riscv-process-fix-kernel-gp-leakage.patch
queue-6.8/selftests-mm-include-strings.h-for-ffsl.patch
queue-6.8/udp-prevent-local-udp-tunnel-packets-from-being-groed.patch
queue-6.8/selftests-net-gro-fwd-update-vxlan-gro-test-expectations.patch
queue-6.8/netfilter-nf_tables-discard-table-flag-update-with-pending-basechain-deletion.patch
queue-6.8/bpf-support-deferring-bpf_link-dealloc-to-after-rcu-grace-period.patch
queue-6.8/arm64-ptrace-use-saved-floating-point-state-type-to-determine-sve-layout.patch
queue-6.8/asoc-sof-intel-hda-pcm-use-dsp_max_burst_size_in_ms-to-place-constraint.patch
queue-6.8/smb-client-fix-potential-uaf-in-cifs_stats_proc_write.patch
queue-6.8/smb-client-fix-potential-uaf-in-is_valid_oplock_break.patch
queue-6.8/x86-cpufeatures-add-cpuid_lnx_5-to-track-recently-added-linux-defined-word.patch
queue-6.8/netfilter-nf_tables-reject-new-basechain-after-table-flag-update.patch
queue-6.8/smb-client-guarantee-refcounted-children-from-parent-session.patch
queue-6.8/net-phy-micrel-fix-potential-null-pointer-dereference.patch
queue-6.8/octeontx2-af-fix-issue-with-loading-coalesced-kpu-profiles.patch
queue-6.8/netfilter-nf_tables-release-mutex-after-nft_gc_seq_end-from-abort-path.patch
queue-6.8/bluetooth-fix-toctou-in-hci-debugfs-implementation.patch
queue-6.8/smb-client-serialise-cifs_construct_tcon-with-cifs_mount_mutex.patch
queue-6.8/asoc-sof-intel-hda-common-ops-do-not-set-the-get_stream_position-callback.patch
queue-6.8/netfilter-nf_tables-flush-pending-destroy-work-before-exit_net-release.patch
queue-6.8/net-txgbe-fix-i2c-dev-name-cannot-match-clkdev.patch
queue-6.8/riscv-fix-vector-state-restore-in-rt_sigreturn.patch
queue-6.8/smb-client-fix-potential-uaf-in-cifs_dump_full_key.patch
queue-6.8/x86-bhi-add-support-for-clearing-branch-history-at-syscall-entry.patch
queue-6.8/net-usb-ax88179_178a-avoid-the-interface-always-configured-as-random-address.patch
queue-6.8/alsa-hda-realtek-fix-inactive-headset-mic-jack.patch
queue-6.8/asoc-sof-intel-set-the-dai-host-get-frame-byte-counter-callbacks.patch
queue-6.8/net-fec-set-mac_managed_pm-during-probe.patch
queue-6.8/kvm-arm64-fix-out-of-ipa-space-translation-fault-handling.patch
queue-6.8/x86-efistub-remap-kernel-text-read-only-before-dropping-nx-attribute.patch
queue-6.8/driver-core-introduce-device_link_wait_removal.patch
queue-6.8/smb-client-refresh-referral-without-acquiring-refpath_lock.patch
queue-6.8/selftests-reuseaddr_conflict-add-missing-new-line-at-the-end-of-the-output.patch
queue-6.8/bluetooth-qca-fix-device-address-endianness.patch
queue-6.8/drm-i915-gt-enable-only-one-ccs-for-compute-workload.patch
queue-6.8/x86-sme-move-early-sme-kernel-encryption-handling-into-.head.text.patch
queue-6.8/arm64-dts-qcom-sc7180-trogdor-mark-bluetooth-address-as-broken.patch
queue-6.8/mlxbf_gige-stop-interface-during-shutdown.patch
queue-6.8/asoc-sof-introduce-a-new-callback-pair-to-be-used-for-pcm-delay-reporting.patch
queue-6.8/mptcp-prevent-bpf-accessing-lowat-from-a-subflow-socket.patch
queue-6.8/alsa-hda-realtek-add-sound-quirks-for-lenovo-legion-slim-7-16arha7-models.patch
queue-6.8/io_uring-kbuf-protect-io_buffer_list-teardown-with-a-reference.patch
queue-6.8/smb-client-fix-potential-uaf-in-smb2_is_network_name_deleted.patch
queue-6.8/i40e-fix-vf-may-be-used-uninitialized-in-this-function-warning.patch
queue-6.8/asoc-sof-ipc4-pcm-use-the-snd_sof_pcm_get_dai_frame_counter-for-pcm_delay.patch
queue-6.8/x86-mce-make-sure-to-grab-mce_sysfs_mutex-in-set_bank.patch
queue-6.8/asoc-sof-ipc4-topology-save-the-dma-maximum-burst-size-for-pcms.patch
queue-6.8/x86-retpoline-do-the-necessary-fixup-to-the-zen3-4-srso-return-thunk-for-srso.patch
queue-6.8/bluetooth-hci_event-set-the-conn-encrypted-before-conn-establishes.patch
queue-6.8/smb-client-fix-potential-uaf-in-cifs_debug_files_proc_show.patch
queue-6.8/drm-i915-gt-disable-hw-load-balancing-for-ccs.patch
queue-6.8/net-sched-act_skbmod-prevent-kernel-infoleak.patch
queue-6.8/alsa-hda-add-pplcllpl-u-members-to-hdac_ext_stream.patch
queue-6.8/net-stmmac-fix-rx-queue-priority-assignment.patch
queue-6.8/selinux-avoid-dereference-of-garbage-after-mount-failure.patch
queue-6.8/bpf-put-uprobe-link-s-path-and-task-in-release-callback.patch
queue-6.8/x86-bhi-mitigate-kvm-by-default.patch
queue-6.8/smb-client-handle-dfs-tcons-in-cifs_construct_tcon.patch
queue-6.8/erspan-make-sure-erspan_base_hdr-is-present-in-skb-head.patch
queue-6.8/smb3-retrying-on-failed-server-close.patch
queue-6.8/gro-fix-ownership-transfer.patch
queue-6.8/x86-set-spectre_bhi_on-as-default.patch
queue-6.8/smb-client-fix-uaf-in-smb2_reconnect_server.patch
queue-6.8/x86-sev-move-early-startup-code-into-.head.text-section.patch
queue-6.8/drm-i915-mst-reject-fec-mst-on-icl.patch
queue-6.8/alsa-hda-realtek-update-panasonic-cf-sz6-quirk-to-support-headset-with-microphone.patch
queue-6.8/udp-do-not-transition-udp-gro-fraglist-partial-checksums-to-unnecessary.patch
queue-6.8/net-mana-fix-rx-dma-datasize-and-skb_over_panic.patch
queue-6.8/net-rds-fix-possible-cp-null-dereference.patch
queue-6.8/drm-xe-use-ring-ops-tlb-invalidation-for-rebinds.patch
queue-6.8/mm-secretmem-fix-gup-fast-succeeding-on-secretmem-folios.patch
queue-6.8/i40e-enforce-software-interrupt-during-busy-poll-exit.patch
queue-6.8/revert-drm-amd-display-send-dtbclk-disable-message-on-first-commit.patch
queue-6.8/net-sched-fix-lockdep-splat-in-qdisc_tree_reduce_backlog.patch
queue-6.8/x86-boot-move-mem_encrypt-parsing-to-the-decompressor.patch
queue-6.8/net-phy-micrel-lan8814-fix-when-enabling-disabling-1-step-timestamping.patch
queue-6.8/selftests-mptcp-join-fix-dev-in-check_endpoint.patch
queue-6.8/asoc-sof-remove-the-get_stream_position-callback.patch
queue-6.8/revert-x86-mpparse-register-apic-address-only-once.patch
queue-6.8/efi-libstub-add-generic-support-for-parsing-mem_encrypt.patch
queue-6.8/ksmbd-do-not-set-smb2_global_cap_encryption-for-smb-3.1.1.patch
queue-6.8/x86-bhi-enumerate-branch-history-injection-bhi-bug.patch
queue-6.8/netfilter-validate-user-input-for-expected-length.patch
queue-6.8/of-module-prevent-null-pointer-dereference-in-vsnprintf.patch
queue-6.8/risc-v-kvm-fix-aplic-in_clrip-read-emulation.patch
queue-6.8/x86-syscall-don-t-force-use-of-indirect-calls-for-system-calls.patch
queue-6.8/io_uring-kbuf-hold-io_buffer_list-reference-over-mmap.patch
queue-6.8/drm-i915-dp-fix-the-computation-for-compressed_bpp-for-display-13.patch
queue-6.8/ice-fix-enabling-rx-vlan-filtering.patch
queue-6.8/asoc-sof-ipc4-pcm-correct-the-delay-calculation.patch
queue-6.8/risc-v-kvm-fix-aplic-setipnum_le-be-write-emulation.patch
queue-6.8/e1000e-workaround-for-sporadic-mdi-error-on-meteor-lake-systems.patch
queue-6.8/gpio-cdev-check-for-null-labels-when-sanitizing-them-for-irqs.patch
queue-6.8/alsa-hda-realtek-cs35l41-support-asus-rog-g634jyr.patch
queue-6.8/octeontx2-pf-check-negative-error-code-in-otx2_open.patch
queue-6.8/ax25-fix-use-after-free-bugs-caused-by-ax25_ds_del_timer.patch
queue-6.8/tcp-fix-bind-regression-for-v6-only-wildcard-and-v4-mapped-v6-non-wildcard-addresses-again.patch
queue-6.8/i40e-fix-i40e_count_filters-to-count-only-active-new-filters.patch
queue-6.8/perf-x86-intel-ds-don-t-clear-pebs_data_cfg-for-the-last-pebs-event.patch
queue-6.8/kvm-arm64-fix-host-programmed-guest-events-in-nvhe.patch
queue-6.8/x86-mm-pat-fix-vm_pat-handling-in-cow-mappings.patch
queue-6.8/revert-bluetooth-hci_qca-set-bda-quirk-bit-if-fwnode-exists-in-dt.patch
queue-6.8/io_uring-kbuf-get-rid-of-lower-bgid-lists.patch
queue-6.8/smb-client-fix-potential-uaf-in-smb2_is_valid_lease_break.patch
queue-6.8/asoc-sof-ipc4-pcm-combine-the-sof_ipc4_pipe_paused-cases-in-pcm_trigger.patch
queue-6.8/vsock-virtio-fix-packet-delivery-to-tap-device.patch
queue-6.8/asoc-sof-sof-pcm-add-pointer-callback-to-sof_ipc_pcm_ops.patch
queue-6.8/asoc-sof-intel-hda-compensate-llp-in-case-it-is-not-reset.patch
queue-6.8/s390-entry-align-system-call-table-on-8-bytes.patch
queue-6.8/asoc-sof-ipc4-pcm-move-struct-sof_ipc4_timestamp_info-definition-locally.patch
queue-6.8/kvm-arm64-use-tlbi_ttl_unknown-in-__kvm_tlb_flush_vmid_range.patch
queue-6.8/x86-bugs-change-commas-to-semicolons-in-spectre_v2-sysfs-file.patch
queue-6.8/gpio-cdev-sanitize-the-label-before-requesting-the-interrupt.patch
queue-6.8/smb-client-fix-potential-uaf-in-cifs_signal_cifsd_for_reconnect.patch
queue-6.8/octeontx2-af-add-array-index-check.patch
queue-6.8/drm-i915-gt-do-not-generate-the-command-streamer-for-all-the-ccs.patch
queue-6.8/xen-netfront-add-missing-skb_mark_for_recycle.patch
queue-6.8/bluetooth-add-quirk-for-broken-address-properties.patch
queue-6.8/x86-coco-require-seeding-rng-with-rdrand-on-coco-systems.patch
queue-6.8/net-dsa-sja1105-fix-parameters-order-in-sja1110_pcs_mdio_write_c45.patch
queue-6.8/drm-i915-mst-limit-mst-dsc-to-tgl.patch
queue-6.8/ksmbd-validate-payload-size-in-ipc-response.patch
queue-6.8/r8169-fix-issue-caused-by-buggy-bios-on-certain-boards-with-rtl8168d.patch
queue-6.8/io_uring-kbuf-get-rid-of-bl-is_ready.patch
queue-6.8/asoc-sof-ipc4-pcm-invalidate-the-stream_start_offset-in-paused-state.patch
queue-6.8/drm-xe-rework-rebinding.patch
queue-6.8/x86-bhi-add-bhi-mitigation-knob.patch
queue-6.8/smb-client-fix-potential-uaf-in-cifs_stats_proc_show.patch
queue-6.8/netfilter-nf_tables-fix-potential-data-race-in-__nft_flowtable_type_get.patch
queue-6.8/udp-do-not-accept-non-tunnel-gso-skbs-landing-in-a-tunnel.patch
queue-6.8/aio-fix-null-ptr-deref-in-aio_complete-wakeup.patch
queue-6.8/smb-client-fix-potential-uaf-in-smb2_is_valid_oplock_break.patch
queue-6.8/kvm-arm64-ensure-target-address-is-granule-aligned-for-range-tlbi.patch
queue-6.8/kvm-x86-add-bhi_no.patch
queue-6.8/riscv-fix-spurious-errors-from-__get-put_kernel_nofault.patch
