Daniel Thompson
8bb828229d
lockdown: also lock down previous kgdb use ...
commit eadb2f47a3ced5c64b23b90fd2a3463f63726066 upstream.
KGDB and KDB allow read and write access to kernel memory, and thus
should be restricted during lockdown. An attacker with access to a
serial port (for example, via a hypervisor console, which some cloud
vendors provide over the network) could trigger the debugger so it is
important that the debugger respect the lockdown mode when/if it is
triggered.
Fix this by integrating lockdown into kdb's existing permissions
mechanism. Unfortunately kgdb does not have any permissions mechanism
(although it certainly could be added later) so, for now, kgdb is simply
and brutally disabled by immediately exiting the gdb stub without taking
any action.
For lockdowns established early in the boot (e.g. the normal case) then
this should be fine but on systems where kgdb has set breakpoints before
the lockdown is enacted than "bad things" will happen.
CVE: CVE-2022-21499
Co-developed-by: Stephen Brennan <stephen.s.brennan@oracle.com>
Signed-off-by: Stephen Brennan <stephen.s.brennan@oracle.com>
Reviewed-by: Douglas Anderson <dianders@chromium.org>
Signed-off-by: Daniel Thompson <daniel.thompson@linaro.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-06-06 08:33:48 +02:00
net: introduce CAN specific pointer in the struct net_device
2021-04-07 14:47:41 +02:00
iio: cros_ec_sensors: Fix alignment of buffer in iio_push_to_buffers_with_timestamp()
2021-07-14 16:53:39 +02:00
regulator: rt5033: Fix n_voltages settings for BUCK and LDO
2021-08-08 09:04:07 +02:00
RDMA/mlx4: Do not map the core_clock page to user space unless enabled
2021-06-16 11:59:44 +02:00
net/mlx5: Fix size field in bufferx_reg struct
2022-03-16 13:21:46 +01:00
mmc: core: Fix hanging on I/O during system suspend for removable cards
2021-05-11 14:04:03 +02:00
mtd: lpddr: Fix bad logic in print_drs_error
2020-11-01 12:01:05 +01:00
netfilter: x_tables: Use correct memory barriers.
2021-03-30 14:35:28 +02:00
netfilter: arp_tables: add pre_exit hook for table unregister
2021-04-21 12:56:16 +02:00
netfilter: bridge: add pre_exit hooks for ebtable unregistration
2021-04-21 12:56:16 +02:00
gpio: omap: Save and restore sysconfig
2021-04-28 13:19:14 +02:00
power: supply: max17042_battery: fix typo in MAx17042_TOFF
2021-09-15 09:47:27 +02:00
net: qed: Disable aRFS for NPAR and 100G
2020-10-01 13:18:18 +02:00
mm, hugetlb: allow for "high" userspace addresses
2022-05-09 09:03:28 +02:00
spi: Fix use-after-free with devm_spi_alloc_*
2021-05-14 09:44:20 +02:00
SUNRPC: Don't call connect() more than once on a TCP socket
2022-05-25 09:14:34 +02:00
Revert "usb: core: hcd: Add support for deferring roothub registration"
2021-11-06 13:59:45 +01:00
ACPI: tables: x86: Reserve memory occupied by ACPI tables
2021-05-07 10:51:36 +02:00
arm64: entry: Add vectors that have the bhb mitigation sequences
2022-03-19 13:40:15 +01:00
block: return the correct bvec when checking for gaps
2021-07-14 16:53:48 +02:00
block: don't merge across cgroup boundaries if blkcg is enabled
2022-04-15 14:18:01 +02:00
block: return ELEVATOR_DISCARD_MERGE if possible
2022-05-25 09:14:38 +02:00
x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting
2022-03-11 11:22:37 +01:00
bpf: Fix pointer arithmetic mask tightening under state pruning
2021-09-15 09:47:39 +02:00
kbuild: avoid static_assert for genksyms
2020-12-16 10:56:58 +01:00
drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION()
2021-09-26 14:07:10 +02:00
compiler.h: fix barrier_data() on clang
2020-12-16 10:56:59 +01:00
compiler.h: Raise minimum version of GCC to 5.1 for arm64
2021-01-23 15:57:55 +01:00
compiler.h: Introduce absolute_pointer macro
2021-09-30 10:09:25 +02:00
vmlinux.lds.h: Create section for protection against instrumentation
2021-02-17 10:35:16 +01:00
serial: core: Fix initializing and restoring termios speed
2021-11-17 09:48:25 +01:00
vt: Fix character height handling with VT_RESIZEX
2021-05-26 12:05:20 +02:00
clocksource/drivers/timer-ti-dm: Handle dra7 timer wrap errata i940
2021-06-23 14:41:31 +02:00
crypto - shash: reduce minimum alignment of shash_desc structure
2021-03-09 11:09:38 +01:00
dm: fix deadlock when swapping to encrypted device
2021-03-04 10:26:51 +01:00
PCI/MSI: Protect msi_desc::masked for multi-MSI
2021-08-18 08:57:03 +02:00
dm integrity: fix flush with external metadata device
2021-01-19 18:26:13 +01:00
Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE""
2022-05-25 09:14:38 +02:00
misc: eeprom_93xx46: Add quirk to support Microchip 93LC46B eeprom
2021-03-11 14:06:50 +01:00
efi: use 32-bit alignment for efi_guid_t literals
2021-03-24 11:26:45 +01:00
kyber: fix out of bounds access when preempted
2021-05-19 10:08:30 +02:00
elfcore: correct reference to CONFIG_UML
2021-10-27 09:54:27 +02:00
PM: EM: Increase energy calculation precision
2021-09-15 09:47:33 +02:00
etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead
2022-04-27 13:50:45 +02:00
extcon: Add stubs for extcon_register_notifier_all() functions
2021-04-07 14:47:43 +02:00
bpf: Prevent increasing bpf_jit_limit above max
2021-11-17 09:48:20 +01:00
Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts
2020-10-14 10:32:56 +02:00
writeback: Drop I_DIRTY_TIME_EXPIRE
2021-01-30 13:54:11 +01:00
devtmpfs regression fix: reconfigure on each mount
2022-01-20 09:19:17 +01:00
fscrypt: add fscrypt_symlink_getattr() for computing st_size
2021-09-12 08:56:38 +02:00
fsnotify: invalidate dcache before IN_DELETE event
2022-02-01 17:24:39 +01:00
module/ftrace: handle patchable-function-entry
2022-02-23 11:59:56 +01:00
block/diskstats: more accurate approximation of io_ticks for slow disks
2020-10-07 08:01:29 +02:00
HID: quirks: Allow inverting the absolute X/Y values
2022-01-27 09:19:43 +01:00
hil/parisc: Disable HIL driver when it gets stuck
2020-11-05 11:43:36 +01:00
hrtimer: Ensure timerfd notification for HIGHRES=n
2021-09-15 09:47:26 +02:00
mm/thp: make is_huge_zero_pmd() safe and quicker
2021-06-30 08:47:52 -04:00
mm/hugetlb: initialize hugetlb_usage in mm_init
2021-09-22 12:26:37 +02:00
i2c: Add I2C_AQ_NO_REP_START adapter quirk
2021-05-19 10:08:22 +02:00
net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending
2021-03-04 10:26:53 +01:00
net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit()
2022-03-23 09:12:07 +01:00
macvlan: macvlan_count_rx() needs to be aware of preemption
2021-03-30 14:35:25 +02:00
net: igmp: increase size of mr_ifc_count
2021-08-18 08:57:01 +02:00
iommu/vt-d: Don't dereference iommu_device if IOMMU_API is not built
2021-02-03 23:26:01 +01:00
iomap: fix sub-page uptodate handling
2021-05-19 10:08:30 +02:00
shm: extend forced shm destroy to support objects from several IPC nses
2021-12-01 09:23:35 +01:00
ipv6: make mc_forwarding atomic
2022-04-15 14:18:32 +02:00
genirq: Provide IRQCHIP_AFFINITY_PRE_STARTUP
2021-08-18 08:57:02 +02:00
genirq/irqdomain: Add an irq_create_mapping_affinity() function
2020-12-11 13:23:30 +01:00
kdev_t: always inline major/minor helper functions
2021-01-09 13:44:54 +01:00
hex2bin: make the function hex_to_bin constant-time
2022-05-09 09:03:22 +02:00
ima: Free IMA measurement buffer after kexec syscall
2021-03-04 10:26:25 +01:00
certs: Fix blacklist flag type confusion
2021-03-04 10:26:29 +01:00
mm: khugepaged: recalculate min_free_kbytes after memory hotplug as expected by khugepaged
2020-10-14 10:33:05 +02:00
kprobes: Limit max data_size of the kretprobe instances
2021-12-08 09:01:10 +01:00
kthread: Extract KTHREAD_IS_PER_CPU
2021-02-07 15:35:49 +01:00
KVM: remember position in kvm->vcpus array
2021-09-26 14:07:05 +02:00
libata: fix read log timeout value
2021-11-17 09:48:17 +01:00
linkage: Introduce new macros for assembler symbols
2020-11-10 12:37:24 +01:00
include/linux/list.h: add a macro to test if entry is pointing to the head
2021-09-22 12:26:20 +02:00
binder: use cred instead of task for selinux checks
2021-11-17 09:48:16 +01:00
net: phy: marvell: fix detection of PHY on Topaz switches
2021-04-21 12:56:18 +02:00
rtc: mc146818-lib: Fix the AltCentury for AMD platforms
2022-05-25 09:14:32 +02:00
net: mdio: introduce a shutdown method to mdio device drivers
2021-10-09 14:39:49 +02:00
memblock: fix memblock_phys_alloc() section mismatch error
2022-01-05 12:37:44 +01:00
mm: memcontrol: fix occasional OOMs due to proportional memory.low reclaim
2021-08-26 08:36:22 -04:00
mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range()
2021-09-22 12:26:43 +02:00
memstick: Skip allocating card when removing host
2020-10-07 08:01:25 +02:00
mm/thp: unmap_mapping_page() to fix THP truncate_cleanup_page()
2021-06-30 08:47:53 -04:00
mm: fix struct page layout on 32-bit systems
2021-05-19 10:08:31 +02:00
mm: add VM_WARN_ON_ONCE_PAGE() macro
2021-06-30 08:47:51 -04:00
arm: remove CONFIG_ARCH_HAS_HOLES_MEMORYMODEL
2022-05-15 19:54:46 +02:00
modules: inherit TAINT_PROPRIETARY_MODULE
2021-05-11 14:04:04 +02:00
PCI/MSI: Protect msi_desc::masked for multi-MSI
2021-08-18 08:57:03 +02:00
locking/mutex: Fix non debug version of mutex_lock_io_nested()
2021-03-30 14:35:29 +02:00
net: introduce helper sendpage_ok() in include/linux/net.h
2020-10-14 10:33:00 +02:00
net: Fix features skip in for_each_netdev_feature()
2022-05-18 09:47:24 +02:00
netdevice: add the case if dev is NULL
2022-04-15 14:17:56 +02:00
netfilter: clear skb->next in NF_HOOK_LIST()
2020-12-02 08:49:44 +01:00
netfilter: use actual socket sk rather than skb sk when routing harder
2020-11-18 19:20:17 +01:00
netfilter: use actual socket sk rather than skb sk when routing harder
2020-11-18 19:20:17 +01:00
NFS: swap IO handling is slightly different for O_DIRECT IO
2022-04-15 14:18:35 +02:00
mm: don't rely on system state to detect hot-plug operations
2020-10-07 08:01:30 +02:00
of: fix linker-section match-table corruption
2021-01-06 14:48:37 +01:00
of: clk: Make <linux/of_clk.h> self-contained
2021-12-08 09:01:08 +01:00
once: Fix panic when module unload
2021-09-03 10:08:12 +02:00
mm, oom: make the calculation of oom badness more accurate
2021-09-03 10:08:12 +02:00
overflow: Include header file with SIZE_MAX declaration
2020-10-29 09:57:51 +01:00
mm/page_owner: change split_page_owner to take a count
2020-10-29 09:57:52 +01:00
mm, futex: fix shared futex pgoff on shmem huge page
2021-06-30 08:47:55 -04:00
PCI/ACPI: Add Ampere Altra SOC MCFG quirk
2021-09-26 14:07:05 +02:00
PCI: Reduce warnings on possible RW1C corruption
2022-04-15 14:18:15 +02:00
PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms
2021-09-22 12:26:43 +02:00
perf: Protect perf_guest_cbs with RCU
2022-01-20 09:19:18 +01:00
PM: runtime: Fix unpaired parent child_count for force_resume
2021-05-19 10:08:20 +02:00
PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter
2020-12-30 11:50:53 +01:00
random32: Fix implicit truncation warning in prandom_seed_state()
2021-07-14 16:53:17 +02:00
i40e: optimise prefetch page refcount
2020-12-30 11:50:55 +01:00
proc: fix lookup in /proc/net subdirectories after setns(2)
2021-01-12 20:16:10 +01:00
psi: Fix uaf issue when psi trigger is destroyed while being polled
2022-02-05 12:35:36 +01:00
psi: Fix uaf issue when psi trigger is destroyed while being polled
2022-02-05 12:35:36 +01:00
ptp: improve max_adj check against unreasonable values
2021-06-23 14:41:26 +02:00
serial: qcom_geni_serial: To correct QUP Version detection logic
2020-11-01 12:01:06 +01:00
rcu/nocb: Perform deferred wake up before last idle's need_resched() check
2021-03-04 10:26:47 +01:00
mm/thp: try_to_unmap() use TTU_SYNC for safe splitting
2021-06-30 08:47:52 -04:00
rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
2021-11-17 09:48:44 +01:00
rwsem: Implement down_read_interruptible
2021-01-09 13:44:55 +01:00
oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup
2022-04-27 13:50:48 +02:00
lockdown: also lock down previous kgdb use
2022-06-06 08:33:48 +02:00
seq_buf: Avoid type mismatch for seq_buf_init
2020-12-30 11:51:21 +01:00
siphash: use _unaligned version by default
2021-12-08 09:01:12 +01:00
net/af_unix: fix a data-race in unix_dgram_poll
2021-09-22 12:26:41 +02:00
bpf, sockmap: Fix sk->prot unhash op reset
2021-04-14 08:24:12 +02:00
smp: Fix smp_call_function_single_async prototype
2021-05-14 09:44:33 +02:00
net: make get_net_ns return error if NET_NS is disabled
2021-06-23 14:41:25 +02:00
net: stmmac: disable Split Header (SPH) for Intel platforms
2022-05-25 09:14:38 +02:00
stop_machine: mark helpers __always_inline
2021-03-17 17:03:56 +01:00
PM: s2idle: ACPI: Fix wakeup interrupts handling
2022-02-16 12:52:50 +01:00
swap: fix swapfile read/write offset
2021-03-07 12:20:49 +01:00
swiotlb: using SIZE_MAX needs limits.h included
2020-11-24 13:29:04 +01:00
sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output
2021-03-07 12:20:48 +01:00
tee: export teedev_open() and teedev_close_context()
2022-03-02 11:41:04 +01:00
thermal/core: Fix thermal_cooling_device_register() prototype
2021-09-26 14:07:10 +02:00
kernel, fs: Introduce and use set_restart_fn() and arch_set_restart_data()
2021-03-24 11:26:44 +01:00
Revert "time: Handle negative seconds correctly in timespec64_to_ns()"
2021-09-16 12:56:13 +02:00
sched/topology: Make sched_init_numa() use a set for the deduplicating sort
2022-03-08 19:07:48 +01:00
seq_buf: Avoid type mismatch for seq_buf_init
2020-12-30 11:51:21 +01:00
tracepoint: Add tracepoint_probe_register_may_exist() for BPF tracing
2021-07-14 16:53:08 +02:00
tty: Fix ->session locking
2020-12-11 13:23:28 +01:00
tty: fix return value for unsupported ioctls
2021-05-14 09:44:22 +02:00
u64_stats,lockdep: Fix u64_stats_init() vs lockdep
2021-03-30 14:35:22 +02:00
udp: fix skb_copy_and_csum_datagram with odd segment sizes
2021-02-17 10:35:19 +01:00
usb-storage: Add quirk to defeat Kindle's automatic unload
2021-03-24 11:26:40 +01:00
virtio: unexport virtio_finalize_features
2022-03-16 13:21:48 +01:00
virtio: acknowledge all features before access
2022-03-16 13:21:48 +01:00
net: skip virtio_net_hdr_set_proto if protocol already set
2021-12-29 12:23:34 +01:00
vsock/virtio: add transport parameter to the virtio_transport_reset_no_sock()
2020-10-07 08:01:24 +02:00
wait: add wake_up_pollfree()
2021-12-14 14:49:02 +01:00
XArray: add xas_split
2021-06-10 13:37:14 +02:00
zsmalloc: account the number of compacted pages correctly
2021-03-07 12:20:49 +01:00
