Sean Christopherson 9c09773917 x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n ... commit f337a6a21e upstream. Initialize cpu_mitigations to CPU_MITIGATIONS_OFF if the kernel is built with CONFIG_SPECULATION_MITIGATIONS=n, as the help text quite clearly states that disabling SPECULATION_MITIGATIONS is supposed to turn off all mitigations by default. │ If you say N, all mitigations will be disabled. You really │ should know what you are doing to say so. As is, the kernel still defaults to CPU_MITIGATIONS_AUTO, which results in some mitigations being enabled in spite of SPECULATION_MITIGATIONS=n. Fixes: f43b9876e8 ("x86/retbleed: Add fine grained Kconfig knobs") Signed-off-by: Sean Christopherson <seanjc@google.com> Signed-off-by: Ingo Molnar <mingo@kernel.org> Reviewed-by: Daniel Sneddon <daniel.sneddon@linux.intel.com> Cc: stable@vger.kernel.org Cc: Linus Torvalds <torvalds@linux-foundation.org> Link: https://lore.kernel.org/r/20240409175108.1512861-2-seanjc@google.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2024-04-17 11:18:27 +02:00
..
bpf	bpf: Protect against int overflow for stack access size	2024-04-10 16:28:23 +02:00
cgroup	cgroup_freezer: cgroup_freezing: Check if not frozen	2023-12-13 18:39:19 +01:00
configs	…
debug	kdb: Fix a potential buffer overflow in kdb_local()	2024-01-25 15:27:51 -08:00
dma	dma-direct: Leak pages on dma_set_decrypted() failure	2024-04-13 13:04:59 +02:00
entry	entry: Respect changes to system call number by trace_sys_enter()	2024-04-03 15:19:44 +02:00
events	perf: Fix the nr_addr_filters fix	2024-02-05 20:13:00 +00:00
futex	futex: Don't include process MM in futex key on no-MMU	2023-11-20 11:51:50 +01:00
gcov	gcov: add support for checksum field	2022-12-31 13:33:11 +01:00
irq	genirq/affinity: Move group_cpus_evenly() into lib/	2024-01-10 17:10:33 +01:00
kcsan	kcsan: Don't expect 64 bits atomic builtins from 32 bits architectures	2023-07-19 16:21:37 +02:00
livepatch	livepatch: Fix missing newline character in klp_resolve_symbols()	2023-11-20 11:52:10 +01:00
locking	lockdep: Fix block chain corruption	2023-12-03 07:32:09 +01:00
module	modules: wait do_free_init correctly	2024-03-26 18:20:52 -04:00
power	PM: s2idle: Make sure CPUs will wakeup directly on resume	2024-04-17 11:18:22 +02:00
printk	printk: Update @console_may_schedule in console_trylock_spinning()	2024-04-03 15:19:44 +02:00
rcu	rcu/exp: Handle RCU expedited grace period kworker allocation failure	2024-03-26 18:20:28 -04:00
sched	sched/fair: Take the scheduling domain into account in select_idle_core()	2024-03-26 18:20:30 -04:00
time	timers: Rename del_timer_sync() to timer_delete_sync()	2024-04-03 15:19:23 +02:00
trace	tracing: hide unused ftrace_event_id_fops	2024-04-17 11:18:26 +02:00
.gitignore	…
Kconfig.freezer	…
Kconfig.hz	…
Kconfig.locks	…
Kconfig.preempt	…
Makefile	cfi: Fix CFI failure with KASAN	2022-12-31 13:33:08 +01:00
acct.c	acct: fix potential integer overflow in encode_comp_t()	2022-12-31 13:32:58 +01:00
async.c	async: Introduce async_schedule_dev_nocall()	2024-01-31 16:17:00 -08:00
audit.c	audit: Send netlink ACK before setting connection in auditd_set	2024-02-05 20:12:47 +00:00
audit.h	…
audit_fsnotify.c	…
audit_tree.c	…
audit_watch.c	audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare()	2023-11-28 17:07:08 +00:00
auditfilter.c	…
auditsc.c	audit,io_uring: io_uring openat triggers audit reference count underflow	2023-10-25 12:03:04 +02:00
backtracetest.c	…
bounds.c	bounds: support non-power-of-two CONFIG_NR_CPUS	2024-04-03 15:19:27 +02:00
capability.c	…
cfi.c	…
compat.c	sched_getaffinity: don't assume 'cpumask_size()' is fully initialized	2023-04-06 12:10:40 +02:00
configs.c	…
context_tracking.c	context_tracking: Fix noinstr vs KASAN	2023-03-10 09:33:45 +01:00
cpu.c	x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n	2024-04-17 11:18:27 +02:00
cpu_pm.c	…
crash_core.c	…
crash_dump.c	…
cred.c	cred: switch to using atomic_long_t	2023-12-20 17:00:20 +01:00
delayacct.c	…
dma.c	…
exec_domain.c	…
exit.c	exit: Detect and fix irq disabled state in oops	2023-03-10 09:33:45 +01:00
extable.c	…
fail_function.c	kernel/fail_function: fix memory leak with using debugfs_lookup()	2023-03-11 13:55:39 +01:00
fork.c	kernel/fork: beware of __put_task_struct() calling context	2023-09-23 11:11:00 +02:00
freezer.c	…
gen_kheaders.sh	…
groups.c	…
hung_task.c	…
iomem.c	…
irq_work.c	…
jump_label.c	…
kallsyms.c	kallsyms: Add helper kallsyms_on_each_match_symbol()	2023-10-25 12:03:16 +02:00
kallsyms_internal.h	kallsyms: Reduce the memory occupied by kallsyms_seqs_of_names[]	2023-10-25 12:03:16 +02:00
kcmp.c	…
kcov.c	kcov: kmsan: unpoison area->list in kcov_remote_area_put()	2022-10-03 14:03:23 -07:00
kexec.c	kernel: kexec: copy user-array safely	2023-11-28 17:06:57 +00:00
kexec_core.c	kexec: fix a memory leak in crash_shrink_memory()	2023-07-19 16:21:08 +02:00
kexec_elf.c	…
kexec_file.c	kexec: support purgatories with .text.hot sections	2023-06-21 16:00:55 +02:00
kexec_internal.h	…
kheaders.c	kheaders: Use array declaration instead of char	2023-05-11 23:03:02 +09:00
kmod.c	…
kprobes.c	kprobes: Fix possible use-after-free issue on kprobe registration	2024-04-17 11:18:27 +02:00
ksysfs.c	…
kthread.c	signal: break out of wait loops on kthread_stop()	2022-10-09 16:01:59 -07:00
latencytop.c	…
module_signature.c	…
notifier.c	…
nsproxy.c	…
padata.c	crypto: pcrypt - Fix hungtask for PADATA_RESET	2023-11-28 17:06:58 +00:00
panic.c	panic: Flush kernel log buffer at the end	2024-04-13 13:04:54 +02:00
params.c	…
pid.c	…
pid_namespace.c	rcu-tasks: Fix synchronize_rcu_tasks() VS zap_pid_ns_processes()	2023-03-10 09:32:52 +01:00
profile.c	…
ptrace.c	…
range.c	…
reboot.c	kernel/reboot: emergency_restart: Set correct system_state	2023-11-28 17:07:13 +00:00
regset.c	…
relay.c	relayfs: fix out-of-bounds access in relay_file_read	2023-05-11 23:03:03 +09:00
resource.c	PCI: Allow drivers to request exclusive config regions	2023-09-13 09:42:46 +02:00
resource_kunit.c	…
rseq.c	rseq: Use pr_warn_once() when deprecated/unknown ABI flags are encountered	2022-11-14 09:58:32 +01:00
scftorture.c	scftorture: Forgive memory-allocation failure if KASAN	2023-09-23 11:11:00 +02:00
scs.c	…
seccomp.c	…
signal.c	mm: suppress mm fault logging if fatal signal already pending	2023-08-03 10:24:01 +02:00
smp.c	smp,csd: Throw an error if a CSD lock is stuck for too long	2023-11-28 17:06:55 +00:00
smpboot.c	…
smpboot.h	…
softirq.c	…
stackleak.c	…
stacktrace.c	…
static_call.c	…
static_call_inline.c	…
stop_machine.c	…
sys.c	getrusage: use sig->stats_lock rather than lock_task_sighand()	2024-03-15 10:48:22 -04:00
sys_ni.c	…
sysctl-test.c	…
sysctl.c	proc: proc_skip_spaces() shouldn't think it is working on C strings	2022-12-05 12:09:06 -08:00
task_work.c	…
taskstats.c	…
torture.c	torture: Fix hang during kthread shutdown phase	2023-03-10 09:34:07 +01:00
tracepoint.c	…
tsacct.c	…
ucount.c	…
uid16.c	…
uid16.h	…
umh.c	freezer,umh: Fix call_usermode_helper_exec() vs SIGKILL	2023-02-22 12:59:50 +01:00
up.c	…
user-return-notifier.c	…
user.c	…
user_namespace.c	ucounts: Split rlimit and ucount values and max values	2022-10-09 16:24:05 -07:00
usermode_driver.c	…
utsname.c	…
utsname_sysctl.c	kernel/utsname_sysctl.c: Fix hostname polling	2022-10-23 12:01:01 -07:00
watch_queue.c	kernel: watch_queue: copy user-array safely	2023-11-28 17:06:57 +00:00
watchdog.c	watchdog: move softlockup_panic back to early_param	2023-11-28 17:07:09 +00:00
watchdog_hld.c	watchdog/perf: more properly prevent false positives with turbo modes	2023-07-19 16:21:08 +02:00
workqueue.c	workqueue: Provide one lock class key per work_on_cpu() callsite	2023-11-28 17:06:55 +00:00
workqueue_internal.h	…