From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mga05.intel.com ([192.55.52.43]) by Galois.linutronix.de with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA256:256) (Exim 4.80) (envelope-from ) id 1fR4Eh-0005rX-Kl for speck@linutronix.de; Fri, 08 Jun 2018 01:22:32 +0200 From: ak@linux.intel.com Subject: [MODERATED] [PATCH 0/8] L1TFv7 3 Date: Thu, 7 Jun 2018 16:22:20 -0700 Message-Id: Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit MIME-Version: 1.0 To: speck@linutronix.de List-ID: This is the native OS mitigation for L1TF attacks using page table inversion, and adding the sysfs reporting. Additional mitigations are still needed for KVM. Addresses all left over review comments. Only very minor changes compared to last version. Andi Kleen (7): x86/speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK x86/speculation/l1tf: Protect PROT_NONE PTEs against speculation x86/speculation/l1tf: Make sure the first page is always reserved x86/speculation/l1tf: Add sysfs reporting for l1tf x86/speculation/l1tf: Report if too much memory for L1TF workaround x86/speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings x86/speculation/l1tf: Limit swap file size to MAX_PA/2 Linus Torvalds (1): x86/speculation/l1tf: Protect swap entries against L1TF arch/x86/include/asm/cpufeatures.h | 2 ++ arch/x86/include/asm/page_32_types.h | 9 ++++-- arch/x86/include/asm/pgtable-2level.h | 17 ++++++++++++ arch/x86/include/asm/pgtable-3level.h | 2 ++ arch/x86/include/asm/pgtable-invert.h | 32 +++++++++++++++++++++ arch/x86/include/asm/pgtable.h | 52 ++++++++++++++++++++++++++--------- arch/x86/include/asm/pgtable_64.h | 38 +++++++++++++++++-------- arch/x86/include/asm/processor.h | 5 ++++ arch/x86/kernel/cpu/bugs.c | 10 +++++++ arch/x86/kernel/cpu/common.c | 30 ++++++++++++++++++++ arch/x86/kernel/cpu/cpuid-deps.c | 1 + arch/x86/kernel/setup.c | 29 ++++++++++++++++++- arch/x86/mm/init.c | 15 ++++++++++ arch/x86/mm/mmap.c | 21 ++++++++++++++ drivers/base/cpu.c | 8 ++++++ include/asm-generic/pgtable.h | 12 ++++++++ include/linux/cpu.h | 2 ++ include/linux/swapfile.h | 2 ++ mm/memory.c | 37 ++++++++++++++++++------- mm/mprotect.c | 49 +++++++++++++++++++++++++++++++++ mm/swapfile.c | 46 ++++++++++++++++++++----------- 21 files changed, 366 insertions(+), 53 deletions(-) create mode 100644 arch/x86/include/asm/pgtable-invert.h -- 2.14.3