From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 6551E2BCF7F for ; Sun, 16 Aug 2026 10:38:57 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=170.10.133.124 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786876738; cv=none; b=ruE2i1ngWdNOMHBV2qkoQkNPGjMiTEhvKdy0l3niuvb4G8TzcbxbxAv24NEj/+HFYmeV+AsFo7g19vFK+eYEEPp2AW+AcjNX0FJ6Ho5bSoCEiQHU0a6U22BwgesQCdljIeSkTTB/zAW1u7SxliNDL14+98+OKZeizJ65h0NGAug= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786876738; c=relaxed/simple; bh=E1DtirF/DQyijYx6juRJxgXtDCMrWh5fDkYaKtFffkE=; h=From:To:Cc:Subject:Message-ID:In-Reply-To:References:MIME-Version: Content-Type:Date; b=uEaDhye/y9BgudWVSFGbiV2XJZtWT7+6asv7TrISeIVANQQTKqTVbTtYdjc9L0ffLjl+/a/hpGirO9jpdjE+zC7r48jO57EFzaHjlnP0qSEs7hC7FKLiBxAyIMAqDpDJ8SXPtkqZH5CbHkmr4L9QCZF7fDV6Z8UHAO+qfqL1QS4= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com; spf=pass smtp.mailfrom=redhat.com; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b=XGFNib3E; dkim=pass (2048-bit key) header.d=redhat.com header.i=@redhat.com header.b=pJFpEucP; arc=none smtp.client-ip=170.10.133.124 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=redhat.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b="XGFNib3E"; dkim=pass (2048-bit key) header.d=redhat.com header.i=@redhat.com header.b="pJFpEucP" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1786876736; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=J6KOR7ml/I3DeYY8E5GuQK4htPpObD433wHZPRRbJLQ=; b=XGFNib3EcdIuB9pYXib4dYzbkbZfJHq9aobZ+yMqi5Eh5mHFlz1EjZ2FH/HtIg/EKtF402 /XC8b/RVTIbP61eZ8p0NA2+jEcOpofKx+quK3j8wNwTUHiV7NELh6QU6y/nLZ9W0+dQz7L 6EW+RA+Jzv9XkmKcIEyDQ4K5R5YtK/4= Received: from mail-wm1-f71.google.com (mail-wm1-f71.google.com [209.85.128.71]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-488-As4WBsF8OYm5tz9nq8rMoQ-1; Sun, 16 Aug 2026 06:38:44 -0400 X-MC-Unique: As4WBsF8OYm5tz9nq8rMoQ-1 X-Mimecast-MFC-AGG-ID: As4WBsF8OYm5tz9nq8rMoQ_1786876723 Received: by mail-wm1-f71.google.com with SMTP id 5b1f17b1804b1-4954c2d4081so21054605e9.2 for ; Sun, 16 Aug 2026 03:38:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=google; t=1786876723; x=1787481523; darn=vger.kernel.org; h=date:content-transfer-encoding:content-type:mime-version :organization:references:in-reply-to:message-id:subject:cc:to:from :from:to:cc:subject:date:message-id:reply-to:content-type; bh=J6KOR7ml/I3DeYY8E5GuQK4htPpObD433wHZPRRbJLQ=; b=pJFpEucPf5DMeLJKJbdO7d89hkwY8IsKiYvq6ZSvcHOuPuDUK6F2hFGkbiaIClq37j oN6Yn42ONARMQUK5Uezx7sV6DsGZNXEmLZ0oDAVCV875FumDIEOlkK9VbvOcqmC9LzMc YUlO2RsrLy3swiVkHVKWCGbA0m3wHLZmoj5+kWIEjlnQwHyMWATXz2fIXe3xXM63lm3s F0tlssNvjL20XoAqo5YZc3vz5zg8nlVF3BFzbqpNBGZH4vhG7NkX45zE62kvbm/+2FyC 8kNrLwzHJfN9avw4s3Y40llt0PNgtRHY11ID5mrUqep3YYusXHHvqywKYmfMz7GyqPdg XOig== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786876723; x=1787481523; h=date:content-transfer-encoding:content-type:mime-version :organization:references:in-reply-to:message-id:subject:cc:to:from :x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to:content-type; bh=J6KOR7ml/I3DeYY8E5GuQK4htPpObD433wHZPRRbJLQ=; b=S+1c19xBXvch0mSoAvz7NchCQiepe7z9VOfxAipfU9is5NhKoU1QDmrXGffxg3uYtm UfDfUQVcRwnjVSpT4BoJtg2r2T8hz1pvmpV/dML7jjcCryQlweDYRhsdFX4g8nA80SoJ 0ohNE44P+FnQgqBi7jfwO3vtVZLUPBYsmZIQwH+DuAsfqyw15GfX7AsQxU82UN3iWCB5 6IqF6eKuqa7ascwV8hqrxZOLKdTfU5g5wJ3AscREmU6nZ0g0gxCoiSeIVT71dO6A3G0W ok3DywmgMZe5/5H9XskkCVQNkXW2S29b80Q8DDky8YQBmm05j+raXMj/UfYo9dpIs+tB 5tJQ== X-Forwarded-Encrypted: i=1; AHgh+Ro6U+uMjEwieECAoOMZsSc2o//q2JOmhGkZx/n4o7FubgUjQpvBY6aNiyo+Nm26yuh2VZdNvKv3RbLJ1Ew=@vger.kernel.org X-Gm-Message-State: AOJu0YypZkRO49zKK3hmPKeVYZWqf/z+b5GzyhR9jTo9aG2EKtCmaHIr cKOHK9udHBUOOS9W6Qsw2HF9ZB7mIiRn5uZ06aT8icbJZ5qKrgNmMAQQOP31+A0qEjAS3lE/fhh reJMpb49tag0hhT/TXvhzjDWdNPZfabBz8YWy/fZTil6DxgP1QyinWJphn+6B9xl5jw== X-Gm-Gg: AR+sD13+xVZs+MFKvb6S4Z8ga+bleTlaftiHVfQF4d4kdudBqkEduKG1fb/xTWsvv/d oUiwnJityMygk6XARFYg+FrprPcfBRzE2uxL7ABrDBqq3FAuPkf9rXBvBlAkcEyR/J7mfjlG2SW iZCoDW8TGEQ9dsR5caFfWXxDATC4PCibdorBuYioZjxv77jA96R5uZv7KmetKhGdOPEpZZTofSN ig+Vz4pr6iZhKpMA72CARq7uX366UI1YSbzrUjEeQxKexjtHUrmBRWCGuUKjpJ6kbDzQPFNQZSX K53w7gCCJgfoeYhOnjIDP7TaYRAfRcxf4vXnIFWzpyuaQriNiD2ZkwCFsy7LkA9rLC0KFmVKeaQ MCSXTbh4Vgak= X-Received: by 2002:a05:600c:1f91:b0:492:4e09:9fc1 with SMTP id 5b1f17b1804b1-4998797d111mr236172435e9.15.1786876723025; Sun, 16 Aug 2026 03:38:43 -0700 (PDT) X-Received: by 2002:a05:600c:1f91:b0:492:4e09:9fc1 with SMTP id 5b1f17b1804b1-4998797d111mr236172095e9.15.1786876722609; Sun, 16 Aug 2026 03:38:42 -0700 (PDT) Received: from maya.myfinge.rs (ifcgrfdd.trafficplex.cloud. [2a10:fc81:a806:d6a9::1]) by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-49987b1a31esm211201745e9.2.2026.08.16.03.38.41 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 16 Aug 2026 03:38:41 -0700 (PDT) From: Stefano Brivio To: Eric Biggers Cc: x86@kernel.org, linux-kernel@vger.kernel.org, linux-raid@vger.kernel.org, Christoph Hellwig , linux-crypto@vger.kernel.org, Herbert Xu , Taehee Yoo , netfilter-devel@vger.kernel.org, Pablo Neira Ayuso , Florian Westphal , Phil Sutter , stable@vger.kernel.org Subject: Re: [PATCH 6/6] netfilter: nft_set_pipapo_avx2: add missing vzeroupper Message-ID: <20260816123839.3670e5c3@elisabeth> In-Reply-To: <20260815205750.169336-7-ebiggers@kernel.org> References: <20260815205750.169336-1-ebiggers@kernel.org> <20260815205750.169336-7-ebiggers@kernel.org> Organization: Red Hat X-Mailer: Claws Mail 4.2.0 (GTK 3.24.49; x86_64-pc-linux-gnu) Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Date: Sun, 16 Aug 2026 12:38:41 +0200 (CEST) Eric, thanks for taking care of this. The patch looks good to me, I just have two questions: On Sat, 15 Aug 2026 13:57:50 -0700 Eric Biggers wrote: > Since pipapo_get_avx2() uses YMM registers, execute vzeroupper before > returning from it. This is needed to avoid degrading the performance of > any later SSE code that may happen to be executed. Out of curiosity: was this prompted by some observed latency spike in execution of SSE code, or it's just meant to satisfy the recommendation from AMD and Intel to use it while transitioning from AVX to SSE modes? > Fixes: 7400b063969b ("nft_set_pipapo: Introduce AVX2-based lookup implementation") > Cc: stable@vger.kernel.org Is this really stable material? Skipping vzeroupper might have a performance impact, but it's not an issue for correctness. The main reason why I'm asking is that, while vzeroupper might look harmless and obviously safe, it actually caused CVE-2023-20593 ("ZenBleed") on AMD Zen 2. I expect systems receiving stable kernel updates to also run the patched microcode by now, so I'm not overly concerned in any case. -- Stefano