This is a note to let you know that I've just added the patch titled
x86: set SPECTRE_BHI_ON as default
to the 6.1-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
x86-set-spectre_bhi_on-as-default.patch
and it can be found in the queue-6.1 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree,
please let <stable@xxxxxxxxxxxxxxx> know about it.
>From foo@baz Tue Apr 9 07:32:41 PM CEST 2024
Date: Tue, 09 Apr 2024 19:32:41 +0200
To: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Subject: x86: set SPECTRE_BHI_ON as default
commit 2bb69f5fc72183e1c62547d900f560d0e9334925 upstream.
Part of a merge commit from Linus that adjusted the default setting of
SPECTRE_BHI_ON.
Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
---
arch/x86/Kconfig | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
--- a/arch/x86/Kconfig
+++ b/arch/x86/Kconfig
@@ -2566,7 +2566,7 @@ config MITIGATION_RFDS
choice
prompt "Clear branch history"
depends on CPU_SUP_INTEL
- default SPECTRE_BHI_AUTO
+ default SPECTRE_BHI_ON
help
Enable BHI mitigations. BHI attacks are a form of Spectre V2 attacks
where the branch history buffer is poisoned to speculatively steer
Patches currently in stable-queue which might be from gregkh@xxxxxxxxxxxxxxxxxxx are
queue-6.1/ipv6-fix-infinite-recursion-in-fib6_dump_done.patch
queue-6.1/r8169-skip-dash-fw-status-checks-when-dash-is-disabled.patch
queue-6.1/x86-bhi-define-spec_ctrl_bhi_dis_s.patch
queue-6.1/bpf-sockmap-prevent-lock-inversion-deadlock-in-map-delete-elem.patch
queue-6.1/vboxsf-avoid-an-spurious-warning-if-load_nls_xxx-fails.patch
queue-6.1/i40e-fix-vf-mac-filter-removal.patch
queue-6.1/x86-retpoline-add-noendbr-annotation-to-the-srso-dummy-return-thunk.patch
queue-6.1/ksmbd-don-t-send-oplock-break-if-rename-fails.patch
queue-6.1/of-dynamic-synchronize-of_changeset_destroy-with-the-devlink-removals.patch
queue-6.1/riscv-process-fix-kernel-gp-leakage.patch
queue-6.1/udp-prevent-local-udp-tunnel-packets-from-being-groed.patch
queue-6.1/selftests-net-gro-fwd-update-vxlan-gro-test-expectations.patch
queue-6.1/smb-client-fix-potential-uaf-in-cifs_stats_proc_write.patch
queue-6.1/smb-client-fix-potential-uaf-in-is_valid_oplock_break.patch
queue-6.1/x86-cpufeatures-add-cpuid_lnx_5-to-track-recently-added-linux-defined-word.patch
queue-6.1/netfilter-nf_tables-reject-new-basechain-after-table-flag-update.patch
queue-6.1/net-phy-micrel-fix-potential-null-pointer-dereference.patch
queue-6.1/octeontx2-af-fix-issue-with-loading-coalesced-kpu-profiles.patch
queue-6.1/bluetooth-fix-toctou-in-hci-debugfs-implementation.patch
queue-6.1/netfilter-nf_tables-flush-pending-destroy-work-before-exit_net-release.patch
queue-6.1/x86-bhi-add-support-for-clearing-branch-history-at-syscall-entry.patch
queue-6.1/net-usb-ax88179_178a-avoid-the-interface-always-configured-as-random-address.patch
queue-6.1/alsa-hda-realtek-fix-inactive-headset-mic-jack.patch
queue-6.1/mptcp-don-t-account-accept-of-non-mpc-client-as-fallback-to-tcp.patch
queue-6.1/driver-core-introduce-device_link_wait_removal.patch
queue-6.1/selftests-reuseaddr_conflict-add-missing-new-line-at-the-end-of-the-output.patch
queue-6.1/bluetooth-qca-fix-device-address-endianness.patch
queue-6.1/arm64-dts-qcom-sc7180-trogdor-mark-bluetooth-address-as-broken.patch
queue-6.1/mlxbf_gige-stop-interface-during-shutdown.patch
queue-6.1/smb-client-fix-potential-uaf-in-smb2_is_network_name_deleted.patch
queue-6.1/i40e-fix-vf-may-be-used-uninitialized-in-this-function-warning.patch
queue-6.1/x86-bugs-fix-the-srso-mitigation-on-zen3-4.patch
queue-6.1/x86-mce-make-sure-to-grab-mce_sysfs_mutex-in-set_bank.patch
queue-6.1/x86-retpoline-do-the-necessary-fixup-to-the-zen3-4-srso-return-thunk-for-srso.patch
queue-6.1/bluetooth-hci_event-set-the-conn-encrypted-before-conn-establishes.patch
queue-6.1/smb-client-fix-potential-uaf-in-cifs_debug_files_proc_show.patch
queue-6.1/net-sched-act_skbmod-prevent-kernel-infoleak.patch
queue-6.1/net-stmmac-fix-rx-queue-priority-assignment.patch
queue-6.1/x86-bhi-mitigate-kvm-by-default.patch
queue-6.1/erspan-make-sure-erspan_base_hdr-is-present-in-skb-head.patch
queue-6.1/smb3-retrying-on-failed-server-close.patch
queue-6.1/gro-fix-ownership-transfer.patch
queue-6.1/x86-set-spectre_bhi_on-as-default.patch
queue-6.1/alsa-hda-realtek-update-panasonic-cf-sz6-quirk-to-support-headset-with-microphone.patch
queue-6.1/udp-do-not-transition-udp-gro-fraglist-partial-checksums-to-unnecessary.patch
queue-6.1/net-rds-fix-possible-cp-null-dereference.patch
queue-6.1/mm-secretmem-fix-gup-fast-succeeding-on-secretmem-folios.patch
queue-6.1/net-sched-fix-lockdep-splat-in-qdisc_tree_reduce_backlog.patch
queue-6.1/net-phy-micrel-lan8814-fix-when-enabling-disabling-1-step-timestamping.patch
queue-6.1/selftests-mptcp-join-fix-dev-in-check_endpoint.patch
queue-6.1/ksmbd-do-not-set-smb2_global_cap_encryption-for-smb-3.1.1.patch
queue-6.1/x86-bhi-enumerate-branch-history-injection-bhi-bug.patch
queue-6.1/netfilter-validate-user-input-for-expected-length.patch
queue-6.1/x86-syscall-don-t-force-use-of-indirect-calls-for-system-calls.patch
queue-6.1/nvme-fix-miss-command-type-check.patch
queue-6.1/octeontx2-pf-check-negative-error-code-in-otx2_open.patch
queue-6.1/i40e-fix-i40e_count_filters-to-count-only-active-new-filters.patch
queue-6.1/kvm-arm64-fix-host-programmed-guest-events-in-nvhe.patch
queue-6.1/x86-mm-pat-fix-vm_pat-handling-in-cow-mappings.patch
queue-6.1/revert-bluetooth-hci_qca-set-bda-quirk-bit-if-fwnode-exists-in-dt.patch
queue-6.1/smb-client-fix-potential-uaf-in-smb2_is_valid_lease_break.patch
queue-6.1/selftests-mptcp-display-simult-in-extra_msg.patch
queue-6.1/vsock-virtio-fix-packet-delivery-to-tap-device.patch
queue-6.1/s390-entry-align-system-call-table-on-8-bytes.patch
queue-6.1/x86-bugs-change-commas-to-semicolons-in-spectre_v2-sysfs-file.patch
queue-6.1/smb-client-fix-potential-uaf-in-cifs_signal_cifsd_for_reconnect.patch
queue-6.1/octeontx2-af-add-array-index-check.patch
queue-6.1/revert-x86-mm-ident_map-use-gbpages-only-where-full-gb-page-should-be-mapped.patch
queue-6.1/xen-netfront-add-missing-skb_mark_for_recycle.patch
queue-6.1/bluetooth-add-quirk-for-broken-address-properties.patch
queue-6.1/x86-coco-require-seeding-rng-with-rdrand-on-coco-systems.patch
queue-6.1/ksmbd-validate-payload-size-in-ipc-response.patch
queue-6.1/r8169-fix-issue-caused-by-buggy-bios-on-certain-boards-with-rtl8168d.patch
queue-6.1/x86-bhi-add-bhi-mitigation-knob.patch
queue-6.1/smb-client-fix-potential-uaf-in-cifs_stats_proc_show.patch
queue-6.1/netfilter-nf_tables-fix-potential-data-race-in-__nft_flowtable_type_get.patch
queue-6.1/udp-do-not-accept-non-tunnel-gso-skbs-landing-in-a-tunnel.patch
queue-6.1/smb-client-fix-potential-uaf-in-smb2_is_valid_oplock_break.patch
queue-6.1/kvm-x86-add-bhi_no.patch
queue-6.1/riscv-fix-spurious-errors-from-__get-put_kernel_nofault.patch
