From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.linutronix.de (146.0.238.70:993) by crypto-ml.lab.linutronix.de with IMAP4-SSL for ; 13 Jun 2018 22:48:43 -0000 Received: from mga07.intel.com ([134.134.136.100]) by Galois.linutronix.de with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA256:256) (Exim 4.80) (envelope-from ) id 1fTEZ5-0002eh-Rr for speck@linutronix.de; Thu, 14 Jun 2018 00:48:32 +0200 From: Andi Kleen Subject: [MODERATED] [PATCH 0/8] L1TFv8 2 Date: Wed, 13 Jun 2018 15:48:20 -0700 Message-Id: Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit MIME-Version: 1.0 To: speck@linutronix.de List-ID: This is v8 of the native OS patchkit to mitigate the L1TF side channel. It does not cover KVM. This version addresses the latest review feedbacks. The mitigation setup has been moved into check_bugs, and the memory size checking patch is now integrated into the standard setup. The swap mitigation has been split into two patches. Various other changes. For more details see the individual changelogs. Andi Kleen (6): x86/speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK x86/speculation/l1tf: Protect PROT_NONE PTEs against speculation x86/speculation/l1tf: Make sure the first page is always reserved x86/speculation/l1tf: Add sysfs reporting for l1tf x86/speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings x86/speculation/l1tf: Limit swap file size to MAX_PA/2 Linus Torvalds (2): x86/speculation/l1tf: Change order of offset/type in swap entry x86/speculation/l1tf: Protect swap entries against L1TF arch/x86/include/asm/cpufeatures.h | 2 ++ arch/x86/include/asm/page_32_types.h | 9 ++++-- arch/x86/include/asm/pgtable-2level.h | 17 ++++++++++++ arch/x86/include/asm/pgtable-3level.h | 2 ++ arch/x86/include/asm/pgtable-invert.h | 32 +++++++++++++++++++++ arch/x86/include/asm/pgtable.h | 52 ++++++++++++++++++++++++++--------- arch/x86/include/asm/pgtable_64.h | 38 +++++++++++++++++-------- arch/x86/include/asm/processor.h | 5 ++++ arch/x86/kernel/cpu/bugs.c | 40 +++++++++++++++++++++++++++ arch/x86/kernel/cpu/common.c | 20 ++++++++++++++ arch/x86/kernel/setup.c | 6 ++++ arch/x86/mm/init.c | 15 ++++++++++ arch/x86/mm/mmap.c | 21 ++++++++++++++ drivers/base/cpu.c | 8 ++++++ include/asm-generic/pgtable.h | 12 ++++++++ include/linux/cpu.h | 2 ++ include/linux/swapfile.h | 2 ++ mm/memory.c | 37 ++++++++++++++++++------- mm/mprotect.c | 49 +++++++++++++++++++++++++++++++++ mm/swapfile.c | 46 ++++++++++++++++++++----------- 20 files changed, 363 insertions(+), 52 deletions(-) create mode 100644 arch/x86/include/asm/pgtable-invert.h -- 2.14.4