This is the start of the stable review cycle for the 4.14.63 release. There are 104 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu Aug 16 17:14:49 UTC 2018. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.14.63-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.14.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.14.63-rc1 Josh Poimboeuf <jpoimboe@xxxxxxxxxx> x86/microcode: Allow late microcode loading with SMT disabled David Woodhouse <dwmw@xxxxxxxxxxxx> tools headers: Synchronise x86 cpufeatures.h for L1TF additions Andi Kleen <ak@xxxxxxxxxxxxxxx> x86/mm/kmmio: Make the tracer robust against L1TF Andi Kleen <ak@xxxxxxxxxxxxxxx> x86/mm/pat: Make set_memory_np() L1TF safe Andi Kleen <ak@xxxxxxxxxxxxxxx> x86/speculation/l1tf: Make pmd/pud_mknotpresent() invert Andi Kleen <ak@xxxxxxxxxxxxxxx> x86/speculation/l1tf: Invert all not present mappings Thomas Gleixner <tglx@xxxxxxxxxxxxx> cpu/hotplug: Fix SMT supported evaluation Paolo Bonzini <pbonzini@xxxxxxxxxx> KVM: VMX: Tell the nested hypervisor to skip L1D flush on vmentry Paolo Bonzini <pbonzini@xxxxxxxxxx> x86/speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry Paolo Bonzini <pbonzini@xxxxxxxxxx> x86/speculation: Simplify sysfs report of VMX L1TF vulnerability Paolo Bonzini <pbonzini@xxxxxxxxxx> KVM: VMX: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR Wanpeng Li <wanpengli@xxxxxxxxxxx> KVM: X86: Allow userspace to define the microcode version Wanpeng Li <wanpengli@xxxxxxxxxxx> KVM: X86: Introduce kvm_get_msr_feature() Tom Lendacky <thomas.lendacky@xxxxxxx> KVM: SVM: Add MSR-based feature support for serializing LFENCE Tom Lendacky <thomas.lendacky@xxxxxxx> KVM: x86: Add a framework for supporting MSR-based features Thomas Gleixner <tglx@xxxxxxxxxxxxx> Documentation/l1tf: Remove Yonah processors from not vulnerable list Nicolai Stange <nstange@xxxxxxx> x86/KVM/VMX: Don't set l1tf_flush_l1d from vmx_handle_external_intr() Nicolai Stange <nstange@xxxxxxx> x86/irq: Let interrupt handlers set kvm_cpu_l1tf_flush_l1d Nicolai Stange <nstange@xxxxxxx> x86: Don't include linux/irq.h from asm/hardirq.h Nicolai Stange <nstange@xxxxxxx> x86/KVM/VMX: Introduce per-host-cpu analogue of l1tf_flush_l1d Nicolai Stange <nstange@xxxxxxx> x86/irq: Demote irq_cpustat_t::__softirq_pending to u16 Nicolai Stange <nstange@xxxxxxx> x86/KVM/VMX: Move the l1tf_flush_l1d test to vmx_l1d_flush() Nicolai Stange <nstange@xxxxxxx> x86/KVM/VMX: Replace 'vmx_l1d_flush_always' with 'vmx_l1d_flush_cond' Nicolai Stange <nstange@xxxxxxx> x86/KVM/VMX: Don't set l1tf_flush_l1d to true from vmx_l1d_flush() Josh Poimboeuf <jpoimboe@xxxxxxxxxx> cpu/hotplug: detect SMT disabled by BIOS Tony Luck <tony.luck@xxxxxxxxx> Documentation/l1tf: Fix typos Nicolai Stange <nstange@xxxxxxx> x86/KVM/VMX: Initialize the vmx_l1d_flush_pages' content Thomas Gleixner <tglx@xxxxxxxxxxxxx> Documentation: Add section about CPU vulnerabilities Jiri Kosina <jkosina@xxxxxxx> x86/bugs, kvm: Introduce boot-time control of L1TF mitigations Thomas Gleixner <tglx@xxxxxxxxxxxxx> cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early Jiri Kosina <jkosina@xxxxxxx> cpu/hotplug: Expose SMT control init function Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/kvm: Allow runtime control of L1D flush Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/kvm: Serialize L1D flush parameter setter Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/kvm: Add static key for flush always Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/kvm: Move l1tf setup function Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/l1tf: Handle EPT disabled state proper Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/kvm: Drop L1TF MSR list approach Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/litf: Introduce vmx status variable Thomas Gleixner <tglx@xxxxxxxxxxxxx> cpu/hotplug: Online siblings when SMT control is turned on Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx> x86/KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx> x86/KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx> x86/KVM/VMX: Separate the VMX AUTOLOAD guest/host number accounting Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx> x86/KVM/VMX: Add find_msr() helper function Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx> x86/KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest numbers Paolo Bonzini <pbonzini@xxxxxxxxxx> x86/KVM/VMX: Add L1D flush logic Paolo Bonzini <pbonzini@xxxxxxxxxx> x86/KVM/VMX: Add L1D MSR based flush Paolo Bonzini <pbonzini@xxxxxxxxxx> x86/KVM/VMX: Add L1D flush algorithm Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx> x86/KVM/VMX: Add module argument for L1TF mitigation Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx> x86/KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present Thomas Gleixner <tglx@xxxxxxxxxxxxx> cpu/hotplug: Boot HT siblings at least once Thomas Gleixner <tglx@xxxxxxxxxxxxx> Revert "x86/apic: Ignore secondary threads if nosmt=force" Michal Hocko <mhocko@xxxxxxx> x86/speculation/l1tf: Fix up pte->pfn conversion for PAE Vlastimil Babka <vbabka@xxxxxxx> x86/speculation/l1tf: Protect PAE swap entries against L1TF Borislav Petkov <bp@xxxxxxx> x86/CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx> x86/cpufeatures: Add detection of L1D cache flush support. Vlastimil Babka <vbabka@xxxxxxx> x86/speculation/l1tf: Extend 64bit swap file size limit Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/apic: Ignore secondary threads if nosmt=force Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/cpu/AMD: Evaluate smp_num_siblings early Borislav Petkov <bp@xxxxxxx> x86/CPU/AMD: Do not check CPUID max ext level before parsing SMP info Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/cpu/intel: Evaluate smp_num_siblings early Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/cpu/topology: Provide detect_extended_topology_early() Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/cpu/common: Provide detect_ht_early() Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/cpu/AMD: Remove the pointless detect_ht() call Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/cpu: Remove the pointless CPU printout Thomas Gleixner <tglx@xxxxxxxxxxxxx> cpu/hotplug: Provide knobs to control SMT Thomas Gleixner <tglx@xxxxxxxxxxxxx> cpu/hotplug: Split do_cpu_down() Thomas Gleixner <tglx@xxxxxxxxxxxxx> cpu/hotplug: Make bringup/teardown of smp threads symmetric Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/topology: Provide topology_smt_supported() Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/smp: Provide topology_is_primary_thread() Peter Zijlstra <peterz@xxxxxxxxxxxxx> sched/smt: Update sched_smt_present at runtime Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx> x86/bugs: Move the l1tf function and define pr_fmt properly Andi Kleen <ak@xxxxxxxxxxxxxxx> x86/speculation/l1tf: Limit swap file size to MAX_PA/2 Andi Kleen <ak@xxxxxxxxxxxxxxx> x86/speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings Andi Kleen <ak@xxxxxxxxxxxxxxx> x86/speculation/l1tf: Add sysfs reporting for l1tf Andi Kleen <ak@xxxxxxxxxxxxxxx> x86/speculation/l1tf: Make sure the first page is always reserved Andi Kleen <ak@xxxxxxxxxxxxxxx> x86/speculation/l1tf: Protect PROT_NONE PTEs against speculation Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> x86/speculation/l1tf: Protect swap entries against L1TF Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> x86/speculation/l1tf: Change order of offset/type in swap entry Andi Kleen <ak@xxxxxxxxxxxxxxx> x86/speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT Nick Desaulniers <ndesaulniers@xxxxxxxxxx> x86/irqflags: Provide a declaration for native_save_fl Masami Hiramatsu <mhiramat@xxxxxxxxxx> kprobes/x86: Fix %p uses in error messages Jiri Kosina <jkosina@xxxxxxx> x86/speculation: Protect against userspace-userspace spectreRSB Peter Zijlstra <peterz@xxxxxxxxxxxxx> x86/paravirt: Fix spectre-v2 mitigations for paravirt guests Oleksij Rempel <o.rempel@xxxxxxxxxxxxxx> ARM: dts: imx6sx: fix irq for pcie bridge Lukas Wunner <lukas@xxxxxxxxx> Bluetooth: hci_serdev: Init hci_uart proto_lock to avoid oops Ronald Tschalär <ronald@xxxxxxxxxxxxx> Bluetooth: hci_ldisc: Allow sleeping while proto locks are held. Chunfeng Yun <chunfeng.yun@xxxxxxxxxxxx> phy: phy-mtk-tphy: use auto instead of force to bypass utmi signals Fabio Estevam <fabio.estevam@xxxxxxx> mtd: nand: qcom: Add a NULL check for devm_kasprintf() Al Viro <viro@xxxxxxxxxxxxxxxxxx> fix __legitimize_mnt()/mntput() race Al Viro <viro@xxxxxxxxxxxxxxxxxx> fix mntput/mntput race Al Viro <viro@xxxxxxxxxxxxxxxxxx> make sure that __dentry_kill() always invalidates d_seq, unhashed or not Al Viro <viro@xxxxxxxxxxxxxxxxxx> root dentries need RCU-delayed freeing Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> init: rename and re-order boot_cpu_state_init() Quinn Tran <quinn.tran@xxxxxxxxxx> scsi: qla2xxx: Fix memory leak for allocating abort IOCB Bart Van Assche <bart.vanassche@xxxxxxx> scsi: sr: Avoid that opening a CD-ROM hangs with runtime power management enabled Juergen Gross <jgross@xxxxxxxx> xen/netfront: don't cache skb_shinfo() Isaac J. Manjarres <isaacm@xxxxxxxxxxxxxx> stop_machine: Disable preemption after queueing stopper threads Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> Mark HI and TASKLET softirq synchronous Andrey Konovalov <andreyknvl@xxxxxxxxxx> kasan: add no_sanitize attribute for clang builds Ming Lei <ming.lei@xxxxxxxxxx> scsi: virtio_scsi: fix IO hang caused by automatic irq vector affinity Ming Lei <ming.lei@xxxxxxxxxx> scsi: core: introduce force_blk_mq Ming Lei <ming.lei@xxxxxxxxxx> scsi: hpsa: fix selection of reply queue John David Anglin <dave.anglin@xxxxxxxx> parisc: Define mb() and add memory barriers to assembler unlock sequences Helge Deller <deller@xxxxxx> parisc: Enable CONFIG_MLONGCALLS by default ------------- Diffstat: Documentation/ABI/testing/sysfs-devices-system-cpu | 24 + Documentation/admin-guide/index.rst | 9 + Documentation/admin-guide/kernel-parameters.txt | 78 +++ Documentation/admin-guide/l1tf.rst | 610 +++++++++++++++++++++ Documentation/virtual/kvm/api.txt | 40 +- Makefile | 4 +- arch/Kconfig | 3 + arch/arm/boot/dts/imx6sx.dtsi | 2 +- arch/parisc/Kconfig | 2 +- arch/parisc/include/asm/barrier.h | 32 ++ arch/parisc/kernel/entry.S | 2 + arch/parisc/kernel/pacache.S | 1 + arch/parisc/kernel/syscall.S | 4 + arch/x86/Kconfig | 1 + arch/x86/include/asm/apic.h | 10 + arch/x86/include/asm/cpufeatures.h | 3 + arch/x86/include/asm/dmi.h | 2 +- arch/x86/include/asm/hardirq.h | 26 +- arch/x86/include/asm/irqflags.h | 2 + arch/x86/include/asm/kvm_host.h | 9 + arch/x86/include/asm/msr-index.h | 7 + arch/x86/include/asm/page_32_types.h | 9 +- arch/x86/include/asm/pgtable-2level.h | 17 + arch/x86/include/asm/pgtable-3level.h | 37 +- arch/x86/include/asm/pgtable-invert.h | 32 ++ arch/x86/include/asm/pgtable.h | 74 ++- arch/x86/include/asm/pgtable_64.h | 38 +- arch/x86/include/asm/processor.h | 17 + arch/x86/include/asm/topology.h | 6 +- arch/x86/include/asm/vmx.h | 11 + arch/x86/kernel/apic/apic.c | 17 + arch/x86/kernel/apic/htirq.c | 2 + arch/x86/kernel/apic/io_apic.c | 1 + arch/x86/kernel/apic/msi.c | 1 + arch/x86/kernel/apic/vector.c | 1 + arch/x86/kernel/cpu/amd.c | 49 +- arch/x86/kernel/cpu/bugs.c | 171 ++++-- arch/x86/kernel/cpu/common.c | 56 +- arch/x86/kernel/cpu/cpu.h | 2 + arch/x86/kernel/cpu/intel.c | 7 + arch/x86/kernel/cpu/microcode/core.c | 16 +- arch/x86/kernel/cpu/topology.c | 41 +- arch/x86/kernel/fpu/core.c | 1 + arch/x86/kernel/ftrace.c | 1 + arch/x86/kernel/hpet.c | 1 + arch/x86/kernel/i8259.c | 1 + arch/x86/kernel/idt.c | 1 + arch/x86/kernel/irq.c | 1 + arch/x86/kernel/irq_32.c | 1 + arch/x86/kernel/irq_64.c | 1 + arch/x86/kernel/irqinit.c | 1 + arch/x86/kernel/kprobes/core.c | 6 +- arch/x86/kernel/paravirt.c | 14 +- arch/x86/kernel/setup.c | 6 + arch/x86/kernel/smp.c | 1 + arch/x86/kernel/smpboot.c | 18 + arch/x86/kernel/time.c | 1 + arch/x86/kvm/mmu.c | 1 + arch/x86/kvm/svm.c | 44 +- arch/x86/kvm/vmx.c | 426 ++++++++++++-- arch/x86/kvm/x86.c | 133 ++++- arch/x86/mm/fault.c | 1 + arch/x86/mm/init.c | 23 + arch/x86/mm/kmmio.c | 25 +- arch/x86/mm/mmap.c | 21 + arch/x86/mm/pageattr.c | 8 +- arch/x86/mm/pti.c | 1 + .../intel-mid/device_libs/platform_mrfld_wdt.c | 1 + arch/x86/platform/uv/tlb_uv.c | 1 + arch/x86/xen/enlighten.c | 1 + drivers/base/cpu.c | 8 + drivers/bluetooth/hci_ldisc.c | 38 +- drivers/bluetooth/hci_serdev.c | 1 + drivers/bluetooth/hci_uart.h | 2 +- drivers/gpu/drm/i915/intel_lpe_audio.c | 1 + drivers/mtd/nand/qcom_nandc.c | 3 + drivers/net/xen-netfront.c | 8 +- drivers/pci/host/pci-hyperv.c | 2 + drivers/phy/mediatek/phy-mtk-tphy.c | 19 +- drivers/scsi/hosts.c | 1 + drivers/scsi/hpsa.c | 73 ++- drivers/scsi/hpsa.h | 1 + drivers/scsi/qla2xxx/qla_iocb.c | 53 +- drivers/scsi/sr.c | 29 +- drivers/scsi/virtio_scsi.c | 59 +- fs/dcache.c | 13 +- fs/namespace.c | 28 +- include/asm-generic/pgtable.h | 12 + include/linux/compiler-clang.h | 3 + include/linux/cpu.h | 23 +- include/linux/swapfile.h | 2 + include/scsi/scsi_host.h | 3 + include/uapi/linux/kvm.h | 2 + init/main.c | 2 +- kernel/cpu.c | 282 +++++++++- kernel/sched/core.c | 30 +- kernel/sched/fair.c | 1 + kernel/smp.c | 2 + kernel/softirq.c | 12 +- kernel/stop_machine.c | 10 +- mm/memory.c | 37 +- mm/mprotect.c | 49 ++ mm/swapfile.c | 46 +- tools/arch/x86/include/asm/cpufeatures.h | 3 + 104 files changed, 2619 insertions(+), 456 deletions(-)
