# git rev-parse -q --verify 958f338e96f874a0d29442396d6adf9c1e17aa2d^{commit} 958f338e96f874a0d29442396d6adf9c1e17aa2d already have revision, skipping fetch # git checkout -q -f -B kisskb 958f338e96f874a0d29442396d6adf9c1e17aa2d # git clean -qxdf # < git log -1 # commit 958f338e96f874a0d29442396d6adf9c1e17aa2d # Merge: 781fca5 07d981a # Author: Linus Torvalds # Date: Tue Aug 14 09:46:06 2018 -0700 # # Merge branch 'l1tf-final' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip # # Merge L1 Terminal Fault fixes from Thomas Gleixner: # "L1TF, aka L1 Terminal Fault, is yet another speculative hardware # engineering trainwreck. It's a hardware vulnerability which allows # unprivileged speculative access to data which is available in the # Level 1 Data Cache when the page table entry controlling the virtual # address, which is used for the access, has the Present bit cleared or # other reserved bits set. # # If an instruction accesses a virtual address for which the relevant # page table entry (PTE) has the Present bit cleared or other reserved # bits set, then speculative execution ignores the invalid PTE and loads # the referenced data if it is present in the Level 1 Data Cache, as if # the page referenced by the address bits in the PTE was still present # and accessible. # # While this is a purely speculative mechanism and the instruction will # raise a page fault when it is retired eventually, the pure act of # loading the data and making it available to other speculative # instructions opens up the opportunity for side channel attacks to # unprivileged malicious code, similar to the Meltdown attack. # # While Meltdown breaks the user space to kernel space protection, L1TF # allows to attack any physical memory address in the system and the # attack works across all protection domains. It allows an attack of SGX # and also works from inside virtual machines because the speculation # bypasses the extended page table (EPT) protection mechanism. # # The assoicated CVEs are: CVE-2018-3615, CVE-2018-3620, CVE-2018-3646 # # The mitigations provided by this pull request include: # # - Host side protection by inverting the upper address bits of a non # present page table entry so the entry points to uncacheable memory. # # - Hypervisor protection by flushing L1 Data Cache on VMENTER. # # - SMT (HyperThreading) control knobs, which allow to 'turn off' SMT # by offlining the sibling CPU threads. The knobs are available on # the kernel command line and at runtime via sysfs # # - Control knobs for the hypervisor mitigation, related to L1D flush # and SMT control. The knobs are available on the kernel command line # and at runtime via sysfs # # - Extensive documentation about L1TF including various degrees of # mitigations. # # Thanks to all people who have contributed to this in various ways - # patches, review, testing, backporting - and the fruitful, sometimes # heated, but at the end constructive discussions. # # There is work in progress to provide other forms of mitigations, which # might be less horrible performance wise for a particular kind of # workloads, but this is not yet ready for consumption due to their # complexity and limitations" # # * 'l1tf-final' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (75 commits) # x86/microcode: Allow late microcode loading with SMT disabled # tools headers: Synchronise x86 cpufeatures.h for L1TF additions # x86/mm/kmmio: Make the tracer robust against L1TF # x86/mm/pat: Make set_memory_np() L1TF safe # x86/speculation/l1tf: Make pmd/pud_mknotpresent() invert # x86/speculation/l1tf: Invert all not present mappings # cpu/hotplug: Fix SMT supported evaluation # KVM: VMX: Tell the nested hypervisor to skip L1D flush on vmentry # x86/speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry # x86/speculation: Simplify sysfs report of VMX L1TF vulnerability # Documentation/l1tf: Remove Yonah processors from not vulnerable list # x86/KVM/VMX: Don't set l1tf_flush_l1d from vmx_handle_external_intr() # x86/irq: Let interrupt handlers set kvm_cpu_l1tf_flush_l1d # x86: Don't include linux/irq.h from asm/hardirq.h # x86/KVM/VMX: Introduce per-host-cpu analogue of l1tf_flush_l1d # x86/irq: Demote irq_cpustat_t::__softirq_pending to u16 # x86/KVM/VMX: Move the l1tf_flush_l1d test to vmx_l1d_flush() # x86/KVM/VMX: Replace 'vmx_l1d_flush_always' with 'vmx_l1d_flush_cond' # x86/KVM/VMX: Don't set l1tf_flush_l1d to true from vmx_l1d_flush() # cpu/hotplug: detect SMT disabled by BIOS # ... # < /opt/cross/kisskb/korg/gcc-8.1.0-nolibc/x86_64-linux/bin/x86_64-linux-gcc --version # < git log --format=%s --max-count=1 958f338e96f874a0d29442396d6adf9c1e17aa2d # < make -s -j 80 ARCH=x86_64 O=/kisskb/build/linus-rand_x86_64-randconfig_x86_64-gcc8 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-8.1.0-nolibc/x86_64-linux/bin/x86_64-linux- randconfig KCONFIG_SEED=0xDE003858 # Added to kconfig CONFIG_STANDALONE=y # Added to kconfig CONFIG_PREVENT_FIRMWARE_BUILD=y # Added to kconfig CONFIG_CC_STACKPROTECTOR_STRONG=n # Added to kconfig CONFIG_GCC_PLUGINS=n # Added to kconfig CONFIG_GCC_PLUGIN_CYC_COMPLEXITY=n # Added to kconfig CONFIG_GCC_PLUGIN_SANCOV=n # Added to kconfig CONFIG_GCC_PLUGIN_LATENT_ENTROPY=n # make -s -j 80 ARCH=x86_64 O=/kisskb/build/linus-rand_x86_64-randconfig_x86_64-gcc8 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-8.1.0-nolibc/x86_64-linux/bin/x86_64-linux- olddefconfig # make -s -j 80 ARCH=x86_64 O=/kisskb/build/linus-rand_x86_64-randconfig_x86_64-gcc8 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-8.1.0-nolibc/x86_64-linux/bin/x86_64-linux- In file included from /kisskb/src/include/linux/bitmap.h:9, from /kisskb/src/include/linux/cpumask.h:12, from /kisskb/src/arch/x86/include/asm/cpumask.h:5, from /kisskb/src/arch/x86/include/asm/msr.h:11, from /kisskb/src/arch/x86/include/asm/processor.h:21, from /kisskb/src/arch/x86/include/asm/cpufeature.h:5, from /kisskb/src/arch/x86/include/asm/thread_info.h:53, from /kisskb/src/include/linux/thread_info.h:38, from /kisskb/src/arch/x86/include/asm/preempt.h:7, from /kisskb/src/include/linux/preempt.h:81, from /kisskb/src/include/linux/spinlock.h:51, from /kisskb/src/include/linux/wait.h:9, from /kisskb/src/include/linux/wait_bit.h:8, from /kisskb/src/include/linux/fs.h:6, from /kisskb/src/fs/configfs/symlink.c:27: In function 'strncpy', inlined from 'fill_item_path' at /kisskb/src/fs/configfs/symlink.c:67:3, inlined from 'configfs_getlink' at /kisskb/src/fs/configfs/symlink.c:250:2, inlined from 'configfs_get_link' at /kisskb/src/fs/configfs/symlink.c:295:10: /kisskb/src/include/linux/string.h:246:9: warning: '__builtin_strncpy' output truncated before terminating nul copying as many bytes from a string as its length [-Wstringop-truncation] return __builtin_strncpy(p, q, size); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ /kisskb/src/fs/configfs/symlink.c: In function 'configfs_get_link': /kisskb/src/include/linux/string.h:267:10: note: length computed here return __builtin_strlen(p); ^~~~~~~~~~~~~~~~~~~ In file included from /kisskb/src/include/linux/bitmap.h:9, from /kisskb/src/include/linux/cpumask.h:12, from /kisskb/src/arch/x86/include/asm/cpumask.h:5, from /kisskb/src/arch/x86/include/asm/msr.h:11, from /kisskb/src/arch/x86/include/asm/processor.h:21, from /kisskb/src/arch/x86/include/asm/cpufeature.h:5, from /kisskb/src/arch/x86/include/asm/thread_info.h:53, from /kisskb/src/include/linux/thread_info.h:38, from /kisskb/src/arch/x86/include/asm/preempt.h:7, from /kisskb/src/include/linux/preempt.h:81, from /kisskb/src/include/linux/spinlock.h:51, from /kisskb/src/include/linux/wait.h:9, from /kisskb/src/include/linux/wait_bit.h:8, from /kisskb/src/include/linux/fs.h:6, from /kisskb/src/fs/kernfs/symlink.c:11: In function 'strncpy', inlined from 'kernfs_get_target_path' at /kisskb/src/fs/kernfs/symlink.c:91:3, inlined from 'kernfs_getlink.isra.0' at /kisskb/src/fs/kernfs/symlink.c:109:10, inlined from 'kernfs_iop_get_link' at /kisskb/src/fs/kernfs/symlink.c:127:10: /kisskb/src/include/linux/string.h:246:9: warning: '__builtin_strncpy' output truncated before terminating nul copying as many bytes from a string as its length [-Wstringop-truncation] return __builtin_strncpy(p, q, size); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ /kisskb/src/fs/kernfs/symlink.c: In function 'kernfs_iop_get_link': /kisskb/src/include/linux/string.h:267:10: note: length computed here return __builtin_strlen(p); ^~~~~~~~~~~~~~~~~~~ In file included from /kisskb/src/include/linux/bitmap.h:9, from /kisskb/src/include/linux/cpumask.h:12, from /kisskb/src/arch/x86/include/asm/cpumask.h:5, from /kisskb/src/arch/x86/include/asm/msr.h:11, from /kisskb/src/arch/x86/include/asm/processor.h:21, from /kisskb/src/arch/x86/include/asm/cpufeature.h:5, from /kisskb/src/arch/x86/include/asm/thread_info.h:53, from /kisskb/src/include/linux/thread_info.h:38, from /kisskb/src/arch/x86/include/asm/preempt.h:7, from /kisskb/src/include/linux/preempt.h:81, from /kisskb/src/include/linux/rcupdate.h:40, from /kisskb/src/include/linux/rculist.h:11, from /kisskb/src/include/linux/pid.h:5, from /kisskb/src/include/linux/sched.h:14, from /kisskb/src/drivers/devfreq/devfreq.c:14: In function 'strncpy', inlined from 'devfreq_add_device' at /kisskb/src/drivers/devfreq/devfreq.c:593:2: /kisskb/src/include/linux/string.h:246:9: warning: '__builtin_strncpy' specified bound 16 equals destination size [-Wstringop-truncation] return __builtin_strncpy(p, q, size); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ In file included from /kisskb/src/include/linux/bitmap.h:9, from /kisskb/src/include/linux/cpumask.h:12, from /kisskb/src/arch/x86/include/asm/cpumask.h:5, from /kisskb/src/arch/x86/include/asm/msr.h:11, from /kisskb/src/arch/x86/include/asm/processor.h:21, from /kisskb/src/arch/x86/include/asm/cpufeature.h:5, from /kisskb/src/arch/x86/include/asm/thread_info.h:53, from /kisskb/src/include/linux/thread_info.h:38, from /kisskb/src/arch/x86/include/asm/preempt.h:7, from /kisskb/src/include/linux/preempt.h:81, from /kisskb/src/include/linux/spinlock.h:51, from /kisskb/src/include/linux/seqlock.h:36, from /kisskb/src/include/linux/time.h:6, from /kisskb/src/include/linux/stat.h:19, from /kisskb/src/include/linux/module.h:10, from /kisskb/src/drivers/misc/c2port/core.c:12: In function 'strncpy', inlined from 'c2port_device_register' at /kisskb/src/drivers/misc/c2port/core.c:929:2: /kisskb/src/include/linux/string.h:246:9: warning: '__builtin_strncpy' specified bound 32 equals destination size [-Wstringop-truncation] return __builtin_strncpy(p, q, size); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ In file included from /kisskb/src/arch/x86/include/asm/io.h:41, from /kisskb/src/include/linux/io.h:25, from /kisskb/src/drivers/power/supply/charger-manager.c:17: In function 'strncpy', inlined from 'uevent_notify.isra.5' at /kisskb/src/drivers/power/supply/charger-manager.c:488:3: /kisskb/src/include/linux/string.h:246:9: warning: '__builtin_strncpy' output may be truncated copying 32 bytes from a string of length 32 [-Wstringop-truncation] return __builtin_strncpy(p, q, size); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ In file included from /kisskb/src/include/linux/bitmap.h:9, from /kisskb/src/include/linux/cpumask.h:12, from /kisskb/src/arch/x86/include/asm/cpumask.h:5, from /kisskb/src/arch/x86/include/asm/msr.h:11, from /kisskb/src/arch/x86/include/asm/processor.h:21, from /kisskb/src/include/linux/mutex.h:19, from /kisskb/src/include/linux/kernfs.h:13, from /kisskb/src/include/linux/sysfs.h:16, from /kisskb/src/include/linux/kobject.h:20, from /kisskb/src/lib/kobject.c:13: In function 'strncpy', inlined from 'fill_kobj_path' at /kisskb/src/lib/kobject.c:128:3, inlined from 'kobject_get_path' at /kisskb/src/lib/kobject.c:155:2: /kisskb/src/include/linux/string.h:246:9: warning: '__builtin_strncpy' output truncated before terminating nul copying as many bytes from a string as its length [-Wstringop-truncation] return __builtin_strncpy(p, q, size); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ /kisskb/src/lib/kobject.c: In function 'kobject_get_path': /kisskb/src/include/linux/string.h:267:10: note: length computed here return __builtin_strlen(p); ^~~~~~~~~~~~~~~~~~~ In file included from /kisskb/src/include/linux/bitmap.h:9, from /kisskb/src/include/linux/cpumask.h:12, from /kisskb/src/arch/x86/include/asm/cpumask.h:5, from /kisskb/src/arch/x86/include/asm/msr.h:11, from /kisskb/src/arch/x86/include/asm/processor.h:21, from /kisskb/src/include/linux/mutex.h:19, from /kisskb/src/include/linux/kernfs.h:13, from /kisskb/src/include/linux/sysfs.h:16, from /kisskb/src/include/linux/kobject.h:20, from /kisskb/src/include/linux/cdev.h:5, from /kisskb/src/include/drm/drmP.h:36, from /kisskb/src/drivers/gpu/drm/panel/panel-arm-versatile.c:28: In function 'strncpy', inlined from 'versatile_panel_get_modes' at /kisskb/src/drivers/gpu/drm/panel/panel-arm-versatile.c:267:2: /kisskb/src/include/linux/string.h:246:9: warning: '__builtin_strncpy' specified bound 32 equals destination size [-Wstringop-truncation] return __builtin_strncpy(p, q, size); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ In file included from /kisskb/src/include/linux/bitmap.h:9, from /kisskb/src/include/linux/cpumask.h:12, from /kisskb/src/arch/x86/include/asm/cpumask.h:5, from /kisskb/src/arch/x86/include/asm/msr.h:11, from /kisskb/src/arch/x86/include/asm/processor.h:21, from /kisskb/src/arch/x86/include/asm/cpufeature.h:5, from /kisskb/src/arch/x86/include/asm/thread_info.h:53, from /kisskb/src/include/linux/thread_info.h:38, from /kisskb/src/arch/x86/include/asm/preempt.h:7, from /kisskb/src/include/linux/preempt.h:81, from /kisskb/src/include/linux/spinlock.h:51, from /kisskb/src/include/linux/mmzone.h:8, from /kisskb/src/include/linux/gfp.h:6, from /kisskb/src/include/linux/slab.h:15, from /kisskb/src/drivers/gpu/drm/nouveau/include/nvif/os.h:6, from /kisskb/src/drivers/gpu/drm/nouveau/include/nvif/object.h:5, from /kisskb/src/drivers/gpu/drm/nouveau/include/nvif/client.h:5, from /kisskb/src/drivers/gpu/drm/nouveau/nvif/client.c:25: In function 'strncpy', inlined from 'nvif_client_init' at /kisskb/src/drivers/gpu/drm/nouveau/nvif/client.c:72:2: /kisskb/src/include/linux/string.h:246:9: warning: '__builtin_strncpy' specified bound 32 equals destination size [-Wstringop-truncation] return __builtin_strncpy(p, q, size); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ /kisskb/src/drivers/gpu/drm/amd/amdgpu/soc15.c: In function 'soc15_set_ip_blocks': /kisskb/src/drivers/gpu/drm/amd/amdgpu/soc15.c:532:3: warning: #warning "Enable CONFIG_DRM_AMD_DC for display support on SOC15." [-Wcpp] # warning "Enable CONFIG_DRM_AMD_DC for display support on SOC15." ^~~~~~~ /kisskb/src/drivers/gpu/drm/amd/amdgpu/soc15.c:551:3: warning: #warning "Enable CONFIG_DRM_AMD_DC for display support on SOC15." [-Wcpp] # warning "Enable CONFIG_DRM_AMD_DC for display support on SOC15." ^~~~~~~ In file included from /kisskb/src/include/linux/bitmap.h:9, from /kisskb/src/include/linux/cpumask.h:12, from /kisskb/src/arch/x86/include/asm/cpumask.h:5, from /kisskb/src/arch/x86/include/asm/msr.h:11, from /kisskb/src/arch/x86/include/asm/processor.h:21, from /kisskb/src/include/linux/mutex.h:19, from /kisskb/src/include/linux/kernfs.h:13, from /kisskb/src/include/linux/sysfs.h:16, from /kisskb/src/include/linux/kobject.h:20, from /kisskb/src/include/linux/device.h:16, from /kisskb/src/include/linux/hdmi.h:28, from /kisskb/src/drivers/video/hdmi.c:28: In function 'strncpy', inlined from 'hdmi_spd_infoframe_init' at /kisskb/src/drivers/video/hdmi.c:174:2: /kisskb/src/include/linux/string.h:246:9: warning: '__builtin_strncpy' specified bound 8 equals destination size [-Wstringop-truncation] return __builtin_strncpy(p, q, size); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ In function 'strncpy', inlined from 'hdmi_spd_infoframe_init' at /kisskb/src/drivers/video/hdmi.c:175:2: /kisskb/src/include/linux/string.h:246:9: warning: '__builtin_strncpy' specified bound 16 equals destination size [-Wstringop-truncation] return __builtin_strncpy(p, q, size); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ /kisskb/src/drivers/video/fbdev/via/viafbdev.c:1471:12: warning: 'viafb_sup_odev_proc_show' defined but not used [-Wunused-function] static int viafb_sup_odev_proc_show(struct seq_file *m, void *v) ^~~~~~~~~~~~~~~~~~~~~~~~ In file included from /kisskb/src/include/linux/bitmap.h:9, from /kisskb/src/include/linux/cpumask.h:12, from /kisskb/src/arch/x86/include/asm/cpumask.h:5, from /kisskb/src/arch/x86/include/asm/msr.h:11, from /kisskb/src/arch/x86/include/asm/processor.h:21, from /kisskb/src/arch/x86/include/asm/cpufeature.h:5, from /kisskb/src/arch/x86/include/asm/thread_info.h:53, from /kisskb/src/include/linux/thread_info.h:38, from /kisskb/src/arch/x86/include/asm/preempt.h:7, from /kisskb/src/include/linux/preempt.h:81, from /kisskb/src/include/linux/spinlock.h:51, from /kisskb/src/include/linux/mmzone.h:8, from /kisskb/src/include/linux/gfp.h:6, from /kisskb/src/include/linux/slab.h:15, from /kisskb/src/drivers/gpu/drm/nouveau/include/nvif/os.h:6, from /kisskb/src/drivers/gpu/drm/nouveau/include/nvkm/core/os.h:4, from /kisskb/src/drivers/gpu/drm/nouveau/include/nvkm/core/oclass.h:3, from /kisskb/src/drivers/gpu/drm/nouveau/include/nvkm/core/device.h:4, from /kisskb/src/drivers/gpu/drm/nouveau/nvkm/engine/device/priv.h:4, from /kisskb/src/drivers/gpu/drm/nouveau/nvkm/engine/device/user.c:25: In function 'strncpy', inlined from 'nvkm_udevice_info' at /kisskb/src/drivers/gpu/drm/nouveau/nvkm/engine/device/user.c:192:2, inlined from 'nvkm_udevice_mthd' at /kisskb/src/drivers/gpu/drm/nouveau/nvkm/engine/device/user.c:223:10: /kisskb/src/include/linux/string.h:246:9: warning: '__builtin_strncpy' specified bound 16 equals destination size [-Wstringop-truncation] return __builtin_strncpy(p, q, size); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ arch/x86/mm/init.o: In function `max_swapfile_size': init.c:(.text+0x1b1): undefined reference to `generic_max_swapfile_size' /kisskb/src/Makefile:1010: recipe for target 'vmlinux' failed make[1]: *** [vmlinux] Error 1 Makefile:146: recipe for target 'sub-make' failed make: *** [sub-make] Error 2 Command 'make -s -j 80 ARCH=x86_64 O=/kisskb/build/linus-rand_x86_64-randconfig_x86_64-gcc8 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-8.1.0-nolibc/x86_64-linux/bin/x86_64-linux- ' returned non-zero exit status 2 # rm -rf /kisskb/build/linus-rand_x86_64-randconfig_x86_64-gcc8 # Build took: 0:02:11.742271