linux-stable/tools
Borislav Petkov (AMD) acdc883eb6 x86/srso: Add a Speculative RAS Overflow mitigation
Upstream commit: fb3bd914b3

Add a mitigation for the speculative return address stack overflow
vulnerability found on AMD processors.

The mitigation works by ensuring all RET instructions speculate to
a controlled location, similar to how speculation is controlled in the
retpoline sequence.  To accomplish this, the __x86_return_thunk forces
the CPU to mispredict every function return using a 'safe return'
sequence.

To ensure the safety of this mitigation, the kernel must ensure that the
safe return sequence is itself free from attacker interference.  In Zen3
and Zen4, this is accomplished by creating a BTB alias between the
untraining function srso_untrain_ret_alias() and the safe return
function srso_safe_ret_alias() which results in evicting a potentially
poisoned BTB entry and using that safe one for all function returns.

In older Zen1 and Zen2, this is accomplished using a reinterpretation
technique similar to Retbleed one: srso_untrain_ret() and
srso_safe_ret().

Signed-off-by: Borislav Petkov (AMD) <bp@alien8.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2023-08-08 20:04:51 +02:00
..
accounting delayacct: track delays from IRQ/SOFTIRQ 2023-04-18 16:39:34 -07:00
arch x86/bugs: Increase the x86 bugs vector size to two u32s 2023-08-08 20:04:51 +02:00
bootconfig
bpf tools/resolve_btfids: Fix setting HOSTCFLAGS 2023-07-19 16:35:26 +02:00
build
certs
cgroup
counter
debugging
edid
firewire
firmware
gpio tools: gpio: fix debounce_period_us output of lsgpio 2023-05-11 10:56:24 +02:00
hv
iio
include tools/nolibc: ensure stack protector guard is never zero 2023-07-27 08:56:48 +02:00
io_uring
kvm/kvm_stat
laptop
leds
lib libbpf: fix offsetof() and container_of() to work with CO-RE 2023-07-19 16:35:23 +02:00
memory-model LKMM scripting updates for v6.4 2023-04-24 12:02:25 -07:00
mm slab changes for 6.4 2023-04-25 13:00:41 -07:00
net/ynl tools: ynl-gen: fix enum index in _decode_enum(..) 2023-08-03 10:25:53 +02:00
objtool x86/srso: Add a Speculative RAS Overflow mitigation 2023-08-08 20:04:51 +02:00
pci
pcmcia
perf perf build: Fix library not found error when using CSLIBS 2023-07-27 08:56:54 +02:00
power cpupower: Make TSC read per CPU for Mperf monitor 2023-05-08 10:46:49 -06:00
rcu
scripts sh updates for v6.4 2023-04-27 17:41:23 -07:00
spi
testing selftests: mptcp: join: only check for ip6tables if needed 2023-08-03 10:26:10 +02:00
thermal
time
tracing rtla/hwnoise: Reduce runtime to 75% 2023-07-19 16:36:36 +02:00
usb
verification rv: Fix addition on an uninitialized variable 'run' 2023-04-25 17:02:13 -04:00
virtio tools/virtio: fix build break for aarch64 2023-07-19 16:36:41 +02:00
wmi
Makefile tools/Makefile: do missed s/vm/mm/ 2023-04-18 14:22:12 -07:00