[RESEND] Spectre-v2 (IBPB/IBRS) and SSBD fixes for 4.4.y

From: "Srivatsa S. Bhat" <srivatsa@csail.mit.edu>
To: gregkh@linuxfoundation.org, stable@vger.kernel.org
Cc: "Dave Hansen" <dave@sr71.net>,
	srivatsa@csail.mit.edu, "Wanpeng Li" <kernellwp@gmail.com>,
	"Andi Kleen" <ak@linux.intel.com>,
	linux-tip-commits@vger.kernel.org,
	"Piotr Luc" <piotr.luc@intel.com>, "Mel Gorman" <mgorman@suse.de>,
	arjan.van.de.ven@intel.com, xen-devel@lists.xenproject.org,
	"Alexander Sergeyev" <sergeev917@gmail.com>,
	"Brian Gerst" <brgerst@gmail.com>,
	luto@kernel.org, MickaëlSalaün <mic@digikod.net>,
	"Thomas Gleixner" <tglx@linutronix.de>,
	"Joe Konno" <joe.konno@linux.intel.com>,
	"Laura Abbott" <labbott@fedoraproject.org>,
	"Will Drewry" <wad@chromium.org>, "Jiri Kosina" <jkosina@suse.cz>,
	linux-kernel@vger.kernel.org,
	"Jia Zhang" <qianyue.zj@alibaba-inc.com>,
	"Andrew Morton" <akpm@linux-foundation.org>,
	"Linus Torvalds" <torvalds@linux-foundation.org>,
	"David Woodhouse" <dwmw@amazon.co.uk>,
	"KarimAllah Ahmed" <karahmed@amazon.de>
Subject: [RESEND] Spectre-v2 (IBPB/IBRS) and SSBD fixes for 4.4.y
Date: Sat, 14 Jul 2018 02:25:43 -0700	[thread overview]
Message-ID: <153156030832.10043.13438231886571087086.stgit@srivatsa-ubuntu> (raw)

Hi Greg,

This patch series is a backport of the Spectre-v2 fixes (IBPB/IBRS)
and patches for the Speculative Store Bypass vulnerability to 4.4.y
(they apply cleanly on top of 4.4.140).

I used 4.9.y as my reference when backporting to 4.4.y (as I thought
that would minimize the amount of fixing up necessary). Unfortunately
I had to skip the KVM fixes for these vulnerabilities, as the KVM
codebase is drastically different in 4.4 as compared to 4.9. (I tried
my best to backport them initially, but wasn't confident that they
were correct, so I decided to drop them from this series).

You'll notice that the initial few patches in this series include
cleanups etc., that are non-critical to IBPB/IBRS/SSBD. Most of these
patches are aimed at getting the cpufeature.h vs cpufeatures.h split
into 4.4, since a lot of the subsequent patches update these headers.
On my first attempt to backport these patches to 4.4.y, I had actually
tried to do all the updates on the cpufeature.h file itself, but it
started getting very cumbersome, so I resorted to backporting the
cpufeature.h vs cpufeatures.h split and their dependencies as well. I
think apart from these initial patches, the rest of the patchset
doesn't have all that much noise. 

This patchset has been tested on both Intel and AMD machines (Intel
Xeon CPU E5-2660 v4 and AMD EPYC 7281 16-Core Processor, respectively)
with updated microcode. All the patch backports have been
independently reviewed by Matt Helsley, Alexey Makhalov and Bo Gan.

I would appreciate if you could kindly consider these patches for
review and inclusion in a future 4.4.y release.

Thank you very much!

Regards,
Srivatsa
VMware Photon OS

P.S. This patchset is also available in the following repo if anyone
     is interested in giving it a try:

https://github.com/srivatsabhat/linux-stable spectre-v2-fixes-nokvm-4.4.140

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xenproject.org
https://lists.xenproject.org/mailman/listinfo/xen-devel