public inbox for linux-kernel@vger.kernel.org
 help / color / mirror / Atom feed
From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: Bibo Mao <maobibo@loongson.cn>
Cc: Xi Ruoyao <xry111@xry111.site>,
	loongarch@lists.linux.dev, arnd@arndb.de,
	jiaxun.yang@flygoat.com, linux-kernel@vger.kernel.org,
	Huacai Chen <chenhuacai@kernel.org>,
	WANG Xuerui <kernel@xen0n.name>, stable <stable@kernel.org>
Subject: Re: [PATCH] LoongArch: add spectre boundry for syscall dispatch table
Date: Wed, 8 Apr 2026 07:26:45 +0200	[thread overview]
Message-ID: <2026040814-console-curvy-fd6f@gregkh> (raw)
In-Reply-To: <60f0307f-0c44-4f14-0185-4f0a16cf3a9c@loongson.cn>

On Wed, Apr 08, 2026 at 09:17:07AM +0800, Bibo Mao wrote:
> 
> 
> On 2026/4/2 下午10:36, Greg Kroah-Hartman wrote:
> > On Wed, Mar 25, 2026 at 09:53:09AM +0100, Greg Kroah-Hartman wrote:
> > > On Wed, Mar 25, 2026 at 11:26:29AM +0800, Xi Ruoyao wrote:
> > > > On Tue, 2026-03-24 at 17:30 +0100, Greg Kroah-Hartman wrote:
> > > > > The LoongArch syscall number is directly controlled by userspace, but
> > > > > does not have a array_index_nospec() boundry to prevent access past
> > > > > the
> > > > > syscall function pointer tables.
> > > > > 
> > > > > Cc: Huacai Chen <chenhuacai@kernel.org>
> > > > > Cc: WANG Xuerui <kernel@xen0n.name>
> > > > > Assisted-by: gkh_clanker_2000
> > > > > Cc: stable <stable@kernel.org>
> > > > > Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
> > > > > ---
> > > > > My scripts caught this as I think LoongArch is vulnerable to the
> > > > 
> > > > There's no evidence.  The kernel currently report all LoongArch
> > > > processors invulnerable to spectre V1 via cpuinfo.
> > > 
> > > Where is that?  In the sysfs files, or in the actual silicon testing?
> > > 
> > > > So NAK unless there's a reproducer of spectre V1 on LoongArch.  If so
> > > > we'd also need to adjust the cpuinfo output.
> > > 
> > > I really thought this cpu was vulnerable to this, but if the companies
> > > say it isn't, then great, but reports like this:
> > > 	https://cc-sw.com/chinese-loongarch-architecture-evaluation-part-3-of-3/
> > > say that the silicon is vulnerable.  So, which is it?
> > 
> > Any thoughts about this?
> co-ask though it is hard to decide :(

Can't you all run the reproducers on your platform to determine this?
There should be some basic ones around somewhere, this is a very old bug
:)

thanks,

greg k-h

  reply	other threads:[~2026-04-08  5:26 UTC|newest]

Thread overview: 8+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-03-24 16:30 [PATCH] LoongArch: add spectre boundry for syscall dispatch table Greg Kroah-Hartman
2026-03-25  3:26 ` Xi Ruoyao
2026-03-25  8:53   ` Greg Kroah-Hartman
2026-04-02 14:36     ` Greg Kroah-Hartman
2026-04-08  1:17       ` Bibo Mao
2026-04-08  5:26         ` Greg Kroah-Hartman [this message]
2026-04-08  8:20           ` Huacai Chen
2026-04-08  8:27             ` Xi Ruoyao

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=2026040814-console-curvy-fd6f@gregkh \
    --to=gregkh@linuxfoundation.org \
    --cc=arnd@arndb.de \
    --cc=chenhuacai@kernel.org \
    --cc=jiaxun.yang@flygoat.com \
    --cc=kernel@xen0n.name \
    --cc=linux-kernel@vger.kernel.org \
    --cc=loongarch@lists.linux.dev \
    --cc=maobibo@loongson.cn \
    --cc=stable@kernel.org \
    --cc=xry111@xry111.site \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox