[GIT pull] Slow Randomizing Boosts Denial of Service

[GIT pull] Slow Randomizing Boosts Denial of Service

[Thomas Gleixner]

[-- Attachment #1: Type: text/plain, Size: 1058 bytes --]


Subject: [GIT pull] x86/srbds: Special Register Buffer Data Sampling (SRBDS)

Linus,

please pull the x86/srbds branch from:

   git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git x86/srbds

up to: 3798cc4d106e ("x86/speculation: Add Ivy Bridge to affected list")

The 9th episode of the dime novel "The performance killer" with the
subtitle "Slow Randomizing Boosts Denial of Service".

SRBDS is an MDS-like speculative side channel that can leak bits from the
random number generator (RNG) across cores and threads. New microcode
serializes the processor access during the execution of RDRAND and
RDSEED. This ensures that the shared buffer is overwritten before it is
released for reuse.

The mitigation support comes with the usual pile of unpleasent
ingredients:

 - command line options
 - sysfs file
 - microcode checks
 - a list of vulnerable CPUs

Thanks,

        tglx
---
P.S. : The virtual tip branch is attached as bundle, based on
       5.7-rc2 and still merges fine into mainline.

P.P.S: The backports will come in a separate mail.


[-- Attachment #2: srbds-master --]
[-- Type: application/octet-stream, Size: 10841 bytes --]

[GIT backports] Slow Randomizing Boosts Denial of Service

[Thomas Gleixner]

[-- Attachment #1: Type: text/plain, Size: 452 bytes --]

Thomas Gleixner <tglx@linutronix.de> writes:
> P.P.S: The backports will come in a separate mail.

The backports are updated to the latest stable versions and the 4.9
Documentation hickup is fixed up. They are available from:

   cvs.ou.linutronix.de:linux/speck/linux

Branches: linux-5.7.y, linux-5.6.y, linux-5.4.y, linux-4.19.y,
          linux-4.14.y, linux-4.9.y, linux-4.4.y

A tarball with matching bundles is attached.

Thanks,

        tglx


[-- Attachment #2: srbds-final.tar --]
[-- Type: application/x-tar, Size: 112640 bytes --]

[MODERATED] Re: [GIT backports] Slow Randomizing Boosts Denial of Service

[Greg KH]

On Sun, Jun 07, 2020 at 11:13:46PM +0200, speck for Thomas Gleixner wrote:
> Thomas Gleixner <tglx@linutronix.de> writes:
> > P.P.S: The backports will come in a separate mail.
> 
> The backports are updated to the latest stable versions and the 4.9
> Documentation hickup is fixed up. They are available from:
> 
>    cvs.ou.linutronix.de:linux/speck/linux
> 
> Branches: linux-5.7.y, linux-5.6.y, linux-5.4.y, linux-4.19.y,
>           linux-4.14.y, linux-4.9.y, linux-4.4.y
> 
> A tarball with matching bundles is attached.

The bundles look good to me, thanks so much for these.

greg k-h

Re: [GIT pull] Slow Randomizing Boosts Denial of Service

[Thomas Gleixner]

Linus,

Thomas Gleixner <tglx@linutronix.de> writes:

> Subject: [GIT pull] x86/srbds: Special Register Buffer Data Sampling (SRBDS)
>
> Linus,
>
> please pull the x86/srbds branch from:
>
>    git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git x86/srbds
>
> up to: 3798cc4d106e ("x86/speculation: Add Ivy Bridge to affected list")

forgot to mention that the CRD is June 9th 10:00 PDT

Thanks,

        tglx