Josh Poimboeuf
4e9fffdc89
UPSTREAM: x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting ...
commit 44a3918c8245ab10c6c9719dd12e7a8d291980d8 upstream.
With unprivileged eBPF enabled, eIBRS (without retpoline) is vulnerable
to Spectre v2 BHB-based attacks.
When both are enabled, print a warning message and report it in the
'spectre_v2' sysfs vulnerabilities file.
Bug: 215557547
Signed-off-by: Josh Poimboeuf <jpoimboe@redhat.com>
Signed-off-by: Borislav Petkov <bp@suse.de>
Reviewed-by: Thomas Gleixner <tglx@linutronix.de>
[fllinden@amazon.com: backported to 5.4]
Signed-off-by: Frank van der Linden <fllinden@amazon.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: Ie9ee8c137729aadb4f9ef2be346a86d71eca363b
2022-03-14 12:47:10 +01:00
UPSTREAM: bpf: Add kconfig knob for disabling unpriv bpf by default
2022-03-14 12:47:00 +01:00
UPSTREAM: cgroup-v1: Require capabilities to set release_agent
2022-02-05 13:19:09 +01:00
kdb: Make memory allocations more robust
2021-03-04 10:26:10 +01:00
Merge 5.4.156 into android11-5.4-lts
2021-11-02 18:15:00 +01:00
This is the 5.4.148 stable release
2021-09-25 14:41:58 +02:00
gcov: re-fix clang-11+ support
2021-04-14 08:24:10 +02:00
This is the 5.4.146 stable release
2021-09-15 14:01:16 +02:00
ANDROID: kallsyms: increase KSYM_NAME_LEN
2020-08-04 19:33:41 +00:00
This is the 5.4.160 stable release
2021-11-17 10:19:21 +01:00
This is the 5.4.160 stable release
2021-11-17 10:19:21 +01:00
This is the 5.4.159 stable release
2021-11-12 15:09:43 +01:00
This is the 5.4.160 stable release
2021-11-17 10:19:21 +01:00
Merge tag 'android11-5.4.161_r00' into android11-5.4
2022-01-21 08:26:49 +01:00
This is the 5.4.147 stable release
2021-09-16 15:57:48 +02:00
This is the 5.4.160 stable release
2021-11-17 10:19:21 +01:00
This is the 5.4.118 stable release
2021-05-11 16:56:33 +02:00
audit: fix a net reference leak in audit_list_rules_send()
2020-06-22 09:30:59 +02:00
audit: fix a net reference leak in audit_list_rules_send()
2020-06-22 09:30:59 +02:00
audit: move put_tree() to avoid trim_trees refcount underflow and UAF
2021-09-03 10:08:16 +02:00
audit: CONFIG_CHANGE don't log internal bookkeeping as an event
2020-10-01 13:17:32 +02:00
audit: fix a net reference leak in audit_list_rules_send()
2020-06-22 09:30:59 +02:00
audit: fix possible null-pointer dereference in audit_filter_rules
2021-10-27 09:54:27 +02:00
ANDROID: cfi: ensure RCU is watching in __cfi_slowpath
2020-11-02 18:55:52 +00:00
Merge 5.4.133 into android11-5.4-lts
2021-07-20 11:32:58 +02:00
kernel/cpu_pm: Fix uninitted local in cpu_pm
2020-06-22 09:31:22 +02:00
don't dump the threads that had been already exiting when zapped.
2020-11-18 19:20:31 +01:00
fail_function: Remove a redundant mutex unlock
2020-11-24 13:29:18 +01:00
This is the 5.4.148 stable release
2021-09-25 14:41:58 +02:00
Linux 5.4.129
2021-06-30 19:19:07 +02:00
kbuild: add variables for compression tools
2020-09-03 11:27:10 +02:00
ANDROID: kallsyms: ignore ThinLTO+CFI hash suffix in kallsyms_lookup_name()
2020-09-22 20:17:26 +00:00
Revert "kernel/kcmp.c: Use new infrastructure to fix deadlocks in execve"
2021-01-11 14:35:18 +01:00
kernel: kexec: remove the lock operation of system_transition_mutex
2021-02-03 23:25:56 +01:00
kernel: kexec_file: fix error return code of kexec_calculate_store_digests()
2021-05-19 10:08:28 +02:00
kmod: make request_module() return an error when autoloading is disabled
2020-04-17 10:50:22 +02:00
kprobes: Do not use local variable when creating debugfs file
2021-11-17 09:48:36 +01:00
This is the 5.4.145 stable release
2021-09-12 09:54:40 +02:00
kbuild: update config_data.gz only when the content of .config is changed
2021-05-11 14:04:16 +02:00
Linux 5.4.129
2021-06-30 19:19:07 +02:00
module: harden ELF info handling
2021-04-07 14:47:38 +02:00
module: harden ELF info handling
2021-04-07 14:47:38 +02:00
kernel/notifier.c: intercept duplicate registrations to avoid infinite loops
2020-10-01 13:17:23 +02:00
padata: add separate cpuhp node for CPUHP_PADATA_DEAD
2020-06-17 16:40:22 +02:00
ANDROID: GKI: pid: Export for find_task_by_vpid
2020-09-28 18:10:49 +00:00
memcg: enable accounting for pids in nested pid namespaces
2021-09-22 12:26:37 +02:00
profiling: fix shift-out-of-bounds bugs
2021-09-26 14:07:09 +02:00
ptrace: make ptrace() fail if the tracee changed its pid unexpectedly
2021-05-26 12:05:15 +02:00
This is the 5.4.78 stable release
2020-11-19 08:52:52 +01:00
kernel/relay.c: fix memleak on destroy relay channel
2020-08-26 10:40:51 +02:00
/dev/mem: Revoke mappings when a driver claims the region
2020-06-24 17:50:35 +02:00
ANDROID: scs: fix recursive spinlock in scs_check_usage
2020-06-09 08:28:50 +00:00
seccomp: Add missing return in non-void function
2021-03-04 10:26:45 +01:00
This is the 5.4.160 stable release
2021-11-17 10:19:21 +01:00
Revert "smp: Fix smp_call_function_single_async prototype"
2021-05-14 15:29:26 +02:00
kthread: Extract KTHREAD_IS_PER_CPU
2021-02-07 15:35:49 +01:00
Merge 5.4.149 into android11-5.4-lts
2021-10-01 14:07:54 +02:00
kernel/sysctl-test: Add null pointer test for sysctl.c:proc_dointvec()
2020-10-01 13:17:10 +02:00
UPSTREAM: x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting
2022-03-14 12:47:10 +01:00
tracepoint: Add tracepoint_probe_register_may_exist() for BPF tracing
2021-07-14 16:53:08 +02:00
usermodehelper: reset umask to default before executing user process
2020-10-14 10:32:58 +02:00
Revert "smp: Fix smp_call_function_single_async prototype"
2021-05-14 15:29:26 +02:00
Revert "ANDROID: proc: Add /proc/uid directory"
2020-03-06 20:23:08 +00:00
This is the 5.4.160 stable release
2021-11-17 10:19:21 +01:00
4e9fffdc89