May 2022 - Linux-stable-mirror

Re: [syzbot] KASAN: use-after-free Read in driver_register

by syzbot

syzbot has found a reproducer for the following issue on: HEAD commit: d3fde8ff50ab Add linux-next specific files for 20220527 git tree: linux-next console output: https://syzkaller.appspot.com/x/log.txt?x=154faf23f00000 kernel config: https://syzkaller.appspot.com/x/.config?x=ccb8d66fc9489ef dashboard link: https://syzkaller.appspot.com/bug?extid=dc7c3ca638e773db07f6 compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 syz repro: https://syzkaller.appspot.com/x/repro.syz?x=17315ad6f00000 C reproducer: https://syzkaller.appspot.com/x/repro.c?x=12087513f00000 IMPORTANT: if you fix the issue, please add the following tag to the commit: Reported-by: syzbot+dc7c3ca638e773db07f6(a)syzkaller.appspotmail.com ================================================================== BUG: KASAN: use-after-free in driver_find drivers/base/driver.c:293 [inline] BUG: KASAN: use-after-free in driver_register+0x352/0x3a0 drivers/base/driver.c:233 Read of size 8 at addr ffff88807813bec8 by task syz-executor372/10628 CPU: 1 PID: 10628 Comm: syz-executor372 Not tainted 5.18.0-next-20220527-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 print_address_description.constprop.0.cold+0xeb/0x495 mm/kasan/report.c:313 print_report mm/kasan/report.c:429 [inline] kasan_report.cold+0xf4/0x1c6 mm/kasan/report.c:491 driver_find drivers/base/driver.c:293 [inline] driver_register+0x352/0x3a0 drivers/base/driver.c:233 usb_gadget_register_driver_owner+0xfb/0x1e0 drivers/usb/gadget/udc/core.c:1558 raw_ioctl_run drivers/usb/gadget/legacy/raw_gadget.c:515 [inline] raw_ioctl+0x188d/0x2730 drivers/usb/gadget/legacy/raw_gadget.c:1222 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x193/0x200 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 RIP: 0033:0x7fddef18d7d7 Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 14 59 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fddef12b258 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fddef12c2d0 RCX: 00007fddef18d7d7 RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 RBP: 0000000000000000 R08: 000000000000ffff R09: 000000000000000b R10: 00007fddef12b300 R11: 0000000000000246 R12: 00007fddef211360 R13: 00007fddef12b2a0 R14: 00007fddef12d400 R15: 0000000000000007 </TASK> Allocated by task 10078: kasan_save_stack+0x1e/0x40 mm/kasan/common.c:38 kasan_set_track mm/kasan/common.c:45 [inline] set_alloc_info mm/kasan/common.c:436 [inline] ____kasan_kmalloc mm/kasan/common.c:515 [inline] ____kasan_kmalloc mm/kasan/common.c:474 [inline] __kasan_kmalloc+0xa9/0xd0 mm/kasan/common.c:524 kmalloc include/linux/slab.h:600 [inline] kzalloc include/linux/slab.h:733 [inline] bus_add_driver+0xd4/0x640 drivers/base/bus.c:602 driver_register+0x220/0x3a0 drivers/base/driver.c:240 usb_gadget_register_driver_owner+0xfb/0x1e0 drivers/usb/gadget/udc/core.c:1558 raw_ioctl_run drivers/usb/gadget/legacy/raw_gadget.c:515 [inline] raw_ioctl+0x188d/0x2730 drivers/usb/gadget/legacy/raw_gadget.c:1222 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x193/0x200 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 Freed by task 10628: kasan_save_stack+0x1e/0x40 mm/kasan/common.c:38 kasan_set_track+0x21/0x30 mm/kasan/common.c:45 kasan_set_free_info+0x20/0x30 mm/kasan/generic.c:370 ____kasan_slab_free mm/kasan/common.c:366 [inline] ____kasan_slab_free+0x166/0x1a0 mm/kasan/common.c:328 kasan_slab_free include/linux/kasan.h:200 [inline] slab_free_hook mm/slub.c:1727 [inline] slab_free_freelist_hook+0x8b/0x1c0 mm/slub.c:1753 slab_free mm/slub.c:3507 [inline] kfree+0xd6/0x4d0 mm/slub.c:4555 kobject_cleanup lib/kobject.c:673 [inline] kobject_release lib/kobject.c:704 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x1c8/0x540 lib/kobject.c:721 driver_find drivers/base/driver.c:291 [inline] driver_register+0x1e3/0x3a0 drivers/base/driver.c:233 usb_gadget_register_driver_owner+0xfb/0x1e0 drivers/usb/gadget/udc/core.c:1558 raw_ioctl_run drivers/usb/gadget/legacy/raw_gadget.c:515 [inline] raw_ioctl+0x188d/0x2730 drivers/usb/gadget/legacy/raw_gadget.c:1222 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x193/0x200 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 Last potentially related work creation: kasan_save_stack+0x1e/0x40 mm/kasan/common.c:38 __kasan_record_aux_stack+0xbe/0xd0 mm/kasan/generic.c:348 kvfree_call_rcu+0x74/0x990 kernel/rcu/tree.c:3647 drop_sysctl_table+0x3c0/0x4e0 fs/proc/proc_sysctl.c:1716 unregister_sysctl_table fs/proc/proc_sysctl.c:1754 [inline] unregister_sysctl_table+0xc0/0x190 fs/proc/proc_sysctl.c:1729 __addrconf_sysctl_unregister net/ipv6/addrconf.c:7108 [inline] addrconf_sysctl_unregister+0xee/0x1c0 net/ipv6/addrconf.c:7136 addrconf_notify+0x7f6/0x1ba0 net/ipv6/addrconf.c:3679 notifier_call_chain+0xb5/0x200 kernel/notifier.c:87 call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:1943 call_netdevice_notifiers_extack net/core/dev.c:1981 [inline] call_netdevice_notifiers net/core/dev.c:1995 [inline] dev_change_name+0x571/0x820 net/core/dev.c:1224 do_setlink+0x19a9/0x3bb0 net/core/rtnetlink.c:2760 __rtnl_newlink+0xd6a/0x17e0 net/core/rtnetlink.c:3546 rtnl_newlink+0x64/0xa0 net/core/rtnetlink.c:3593 rtnetlink_rcv_msg+0x43a/0xc90 net/core/rtnetlink.c:6089 netlink_rcv_skb+0x153/0x420 net/netlink/af_netlink.c:2501 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x543/0x7f0 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x917/0xe10 net/netlink/af_netlink.c:1921 sock_sendmsg_nosec net/socket.c:714 [inline] sock_sendmsg+0xcf/0x120 net/socket.c:734 __sys_sendto+0x21a/0x320 net/socket.c:2119 __do_sys_sendto net/socket.c:2131 [inline] __se_sys_sendto net/socket.c:2127 [inline] __x64_sys_sendto+0xdd/0x1b0 net/socket.c:2127 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 The buggy address belongs to the object at ffff88807813be00 which belongs to the cache kmalloc-256 of size 256 The buggy address is located 200 bytes inside of 256-byte region [ffff88807813be00, ffff88807813bf00) The buggy address belongs to the physical page: page:ffffea0001e04e80 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807813ba00 pfn:0x7813a head:ffffea0001e04e80 order:1 compound_mapcount:0 compound_pincount:0 flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888010c41b40 raw: ffff88807813ba00 000000008010000f 00000001ffffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3682, tgid 3682 (syz-executor372), ts 1120620374205, free_ts 1120617564582 prep_new_page mm/page_alloc.c:2464 [inline] get_page_from_freelist+0xa64/0x3d10 mm/page_alloc.c:4283 __alloc_pages+0x1c7/0x510 mm/page_alloc.c:5507 alloc_pages+0x1aa/0x310 mm/mempolicy.c:2272 alloc_slab_page mm/slub.c:1797 [inline] allocate_slab+0x26c/0x3c0 mm/slub.c:1942 new_slab mm/slub.c:2002 [inline] ___slab_alloc+0x985/0xd90 mm/slub.c:3002 __slab_alloc.constprop.0+0x4d/0xa0 mm/slub.c:3089 slab_alloc_node mm/slub.c:3180 [inline] slab_alloc mm/slub.c:3222 [inline] __kmalloc+0x318/0x350 mm/slub.c:4413 kmalloc include/linux/slab.h:605 [inline] kzalloc include/linux/slab.h:733 [inline] fib_create_info+0xdbe/0x4ac0 net/ipv4/fib_semantics.c:1448 fib_table_insert+0x19a/0x1bd0 net/ipv4/fib_trie.c:1233 fib_magic+0x455/0x540 net/ipv4/fib_frontend.c:1098 fib_add_ifaddr+0x16b/0x540 net/ipv4/fib_frontend.c:1120 fib_inetaddr_event+0x162/0x2a0 net/ipv4/fib_frontend.c:1434 notifier_call_chain+0xb5/0x200 kernel/notifier.c:87 blocking_notifier_call_chain kernel/notifier.c:382 [inline] blocking_notifier_call_chain+0x67/0x90 kernel/notifier.c:370 __inet_insert_ifa+0x919/0xbd0 net/ipv4/devinet.c:554 inet_rtm_newaddr+0x54d/0x980 net/ipv4/devinet.c:960 page last free stack trace: reset_page_owner include/linux/page_owner.h:24 [inline] free_pages_prepare mm/page_alloc.c:1379 [inline] free_pcp_prepare+0x549/0xd20 mm/page_alloc.c:1429 free_unref_page_prepare mm/page_alloc.c:3315 [inline] free_unref_page+0x19/0x7b0 mm/page_alloc.c:3430 qlink_free mm/kasan/quarantine.c:168 [inline] qlist_free_all+0x6a/0x170 mm/kasan/quarantine.c:187 kasan_quarantine_reduce+0x180/0x200 mm/kasan/quarantine.c:294 __kasan_slab_alloc+0xa2/0xc0 mm/kasan/common.c:446 kasan_slab_alloc include/linux/kasan.h:224 [inline] slab_post_alloc_hook mm/slab.h:750 [inline] slab_alloc_node mm/slub.c:3214 [inline] kmem_cache_alloc_node+0x255/0x3f0 mm/slub.c:3264 __alloc_skb+0x215/0x340 net/core/skbuff.c:414 alloc_skb include/linux/skbuff.h:1426 [inline] nlmsg_new include/net/netlink.h:953 [inline] netlink_ack+0x1f0/0xa80 net/netlink/af_netlink.c:2436 netlink_rcv_skb+0x33d/0x420 net/netlink/af_netlink.c:2507 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x543/0x7f0 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x917/0xe10 net/netlink/af_netlink.c:1921 sock_sendmsg_nosec net/socket.c:714 [inline] sock_sendmsg+0xcf/0x120 net/socket.c:734 __sys_sendto+0x21a/0x320 net/socket.c:2119 __do_sys_sendto net/socket.c:2131 [inline] __se_sys_sendto net/socket.c:2127 [inline] __x64_sys_sendto+0xdd/0x1b0 net/socket.c:2127 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 Memory state around the buggy address: ffff88807813bd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff88807813be00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb >ffff88807813be80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff88807813bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff88807813bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ==================================================================

2 years, 7 months

2
2
0 0

Greetings,

by Mrs. Mimi Aminu

-- Greetings, I'm Mrs. Mimi Aminu, how are you doing hope you are in good health, the Board director try to reach you on phone several times Meanwhile, your number was not connecting. before he ask me to send you an email to hear from you if you are fine. hope to hear you are in good Health. Thanks, Mrs. Mimi Aminu.

2 years, 7 months

1
0
0 0

Greetings,

by Mr. Jibri loubda

-- Greetings, I'm Mr. Jibri loubda, how are you doing hope you are in good health, the Board irector try to reach you on phone several times Meanwhile, your number was not connecting. before he ask me to send you an email to hear from you if you are fine. hope to hear you are in good Health. Thanks, Mr. Jibri loubda.

2 years, 7 months

1
0
0 0

Re: Lucrative Opportunity !!!

by MIKE TAILOR INVESTMENT

Mike Tailor Inv is currently doing a great Promo, You have the opportunity to invest at least $250 USD and earn $2,500 USD in 4 working days time. Contact the INV company via this email: ( info(a)miketailorinv.us ). The higher you invest the higher your profit value.

2 years, 7 months

1
0
0 0

[PATCH 5.18 00/47] 5.18.1-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.18.1 release. There are 47 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun, 29 May 2022 08:46:45 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.18.1-rc1… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.18.1-rc1 Edward Matijevic <motolav(a)gmail.com> ALSA: ctxfi: Add SB046x PCI ID Lorenzo Pieralisi <lorenzo.pieralisi(a)arm.com> ACPI: sysfs: Fix BERT error region memory mapping Jason A. Donenfeld <Jason(a)zx2c4.com> random: check for signals after page of pool writes Jens Axboe <axboe(a)kernel.dk> random: wire up fops->splice_{read,write}_iter() Jens Axboe <axboe(a)kernel.dk> random: convert to using fops->write_iter() Jens Axboe <axboe(a)kernel.dk> random: convert to using fops->read_iter() Jason A. Donenfeld <Jason(a)zx2c4.com> random: unify batched entropy implementations Jason A. Donenfeld <Jason(a)zx2c4.com> random: move randomize_page() into mm where it belongs Jason A. Donenfeld <Jason(a)zx2c4.com> random: move initialization functions out of hot pages Jason A. Donenfeld <Jason(a)zx2c4.com> random: make consistent use of buf and len Jason A. Donenfeld <Jason(a)zx2c4.com> random: use proper return types on get_random_{int,long}_wait() Jason A. Donenfeld <Jason(a)zx2c4.com> random: remove extern from functions in header Jason A. Donenfeld <Jason(a)zx2c4.com> random: use static branch for crng_ready() Jason A. Donenfeld <Jason(a)zx2c4.com> random: credit architectural init the exact amount Jason A. Donenfeld <Jason(a)zx2c4.com> random: handle latent entropy and command line from random_init() Jason A. Donenfeld <Jason(a)zx2c4.com> random: use proper jiffies comparison macro Jason A. Donenfeld <Jason(a)zx2c4.com> random: remove ratelimiting for in-kernel unseeded randomness Jason A. Donenfeld <Jason(a)zx2c4.com> random: move initialization out of reseeding hot path Jason A. Donenfeld <Jason(a)zx2c4.com> random: avoid initializing twice in credit race Jason A. Donenfeld <Jason(a)zx2c4.com> random: use symbolic constants for crng_init states Jason A. Donenfeld <Jason(a)zx2c4.com> siphash: use one source of truth for siphash permutations Jason A. Donenfeld <Jason(a)zx2c4.com> random: help compiler out with fast_mix() by using simpler arguments Jason A. Donenfeld <Jason(a)zx2c4.com> random: do not use input pool from hard IRQs Jason A. Donenfeld <Jason(a)zx2c4.com> random: order timer entropy functions below interrupt functions Jason A. Donenfeld <Jason(a)zx2c4.com> random: do not pretend to handle premature next security model Jason A. Donenfeld <Jason(a)zx2c4.com> random: use first 128 bits of input as fast init Jason A. Donenfeld <Jason(a)zx2c4.com> random: do not use batches when !crng_ready() Jason A. Donenfeld <Jason(a)zx2c4.com> random: insist on random_get_entropy() existing in order to simplify Jason A. Donenfeld <Jason(a)zx2c4.com> xtensa: use fallback for random_get_entropy() instead of zero Jason A. Donenfeld <Jason(a)zx2c4.com> sparc: use fallback for random_get_entropy() instead of zero Jason A. Donenfeld <Jason(a)zx2c4.com> um: use fallback for random_get_entropy() instead of zero Jason A. Donenfeld <Jason(a)zx2c4.com> x86/tsc: Use fallback for random_get_entropy() instead of zero Jason A. Donenfeld <Jason(a)zx2c4.com> nios2: use fallback for random_get_entropy() instead of zero Jason A. Donenfeld <Jason(a)zx2c4.com> arm: use fallback for random_get_entropy() instead of zero Jason A. Donenfeld <Jason(a)zx2c4.com> mips: use fallback for random_get_entropy() instead of just c0 random Jason A. Donenfeld <Jason(a)zx2c4.com> riscv: use fallback for random_get_entropy() instead of zero Jason A. Donenfeld <Jason(a)zx2c4.com> m68k: use fallback for random_get_entropy() instead of zero Jason A. Donenfeld <Jason(a)zx2c4.com> timekeeping: Add raw clock fallback for random_get_entropy() Jason A. Donenfeld <Jason(a)zx2c4.com> powerpc: define get_cycles macro for arch-override Jason A. Donenfeld <Jason(a)zx2c4.com> alpha: define get_cycles macro for arch-override Jason A. Donenfeld <Jason(a)zx2c4.com> parisc: define get_cycles macro for arch-override Jason A. Donenfeld <Jason(a)zx2c4.com> s390: define get_cycles macro for arch-override Jason A. Donenfeld <Jason(a)zx2c4.com> ia64: define get_cycles macro for arch-override Jason A. Donenfeld <Jason(a)zx2c4.com> init: call time_init() before rand_initialize() Jason A. Donenfeld <Jason(a)zx2c4.com> random: fix sysctl documentation nits Basavaraj Natikar <Basavaraj.Natikar(a)amd.com> HID: amd_sfh: Add support for sensor discovery Daniel Thompson <daniel.thompson(a)linaro.org> lockdown: also lock down previous kgdb use ------------- Diffstat: Documentation/admin-guide/sysctl/kernel.rst | 8 +- Makefile | 4 +- arch/alpha/include/asm/timex.h | 1 + arch/arm/include/asm/timex.h | 1 + arch/ia64/include/asm/timex.h | 1 + arch/m68k/include/asm/timex.h | 2 +- arch/mips/include/asm/timex.h | 17 +- arch/nios2/include/asm/timex.h | 3 + arch/parisc/include/asm/timex.h | 3 +- arch/powerpc/include/asm/timex.h | 1 + arch/riscv/include/asm/timex.h | 2 +- arch/s390/include/asm/timex.h | 1 + arch/sparc/include/asm/timex_32.h | 4 +- arch/um/include/asm/timex.h | 9 +- arch/x86/include/asm/timex.h | 9 + arch/x86/include/asm/tsc.h | 7 +- arch/xtensa/include/asm/timex.h | 6 +- drivers/acpi/sysfs.c | 25 +- drivers/char/random.c | 1213 +++++++++++---------------- drivers/hid/amd-sfh-hid/amd_sfh_client.c | 11 + drivers/hid/amd-sfh-hid/amd_sfh_pcie.c | 7 + drivers/hid/amd-sfh-hid/amd_sfh_pcie.h | 4 + include/linux/mm.h | 1 + include/linux/prandom.h | 23 +- include/linux/random.h | 92 +- include/linux/security.h | 2 + include/linux/siphash.h | 28 + include/linux/timex.h | 8 + init/main.c | 13 +- kernel/debug/debug_core.c | 24 + kernel/debug/kdb/kdb_main.c | 62 +- kernel/time/timekeeping.c | 15 + lib/Kconfig.debug | 3 +- lib/siphash.c | 32 +- mm/util.c | 32 + security/security.c | 2 + sound/pci/ctxfi/ctatc.c | 2 + sound/pci/ctxfi/cthardware.h | 3 +- 38 files changed, 821 insertions(+), 860 deletions(-)

2 years, 7 months

8
54
0 0

[PATCH 5.15 000/145] 5.15.44-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.15.44 release. There are 145 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun, 29 May 2022 08:46:32 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.44-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.15.44-rc1 Edward Matijevic <motolav(a)gmail.com> ALSA: ctxfi: Add SB046x PCI ID Jason A. Donenfeld <Jason(a)zx2c4.com> random: check for signals after page of pool writes Jens Axboe <axboe(a)kernel.dk> random: wire up fops->splice_{read,write}_iter() Jens Axboe <axboe(a)kernel.dk> random: convert to using fops->write_iter() Jens Axboe <axboe(a)kernel.dk> random: convert to using fops->read_iter() Jason A. Donenfeld <Jason(a)zx2c4.com> random: unify batched entropy implementations Jason A. Donenfeld <Jason(a)zx2c4.com> random: move randomize_page() into mm where it belongs Jason A. Donenfeld <Jason(a)zx2c4.com> random: move initialization functions out of hot pages Jason A. Donenfeld <Jason(a)zx2c4.com> random: make consistent use of buf and len Jason A. Donenfeld <Jason(a)zx2c4.com> random: use proper return types on get_random_{int,long}_wait() Jason A. Donenfeld <Jason(a)zx2c4.com> random: remove extern from functions in header Jason A. Donenfeld <Jason(a)zx2c4.com> random: use static branch for crng_ready() Jason A. Donenfeld <Jason(a)zx2c4.com> random: credit architectural init the exact amount Jason A. Donenfeld <Jason(a)zx2c4.com> random: handle latent entropy and command line from random_init() Jason A. Donenfeld <Jason(a)zx2c4.com> random: use proper jiffies comparison macro Jason A. Donenfeld <Jason(a)zx2c4.com> random: remove ratelimiting for in-kernel unseeded randomness Jason A. Donenfeld <Jason(a)zx2c4.com> random: move initialization out of reseeding hot path Jason A. Donenfeld <Jason(a)zx2c4.com> random: avoid initializing twice in credit race Jason A. Donenfeld <Jason(a)zx2c4.com> random: use symbolic constants for crng_init states Jason A. Donenfeld <Jason(a)zx2c4.com> siphash: use one source of truth for siphash permutations Jason A. Donenfeld <Jason(a)zx2c4.com> random: help compiler out with fast_mix() by using simpler arguments Jason A. Donenfeld <Jason(a)zx2c4.com> random: do not use input pool from hard IRQs Jason A. Donenfeld <Jason(a)zx2c4.com> random: order timer entropy functions below interrupt functions Jason A. Donenfeld <Jason(a)zx2c4.com> random: do not pretend to handle premature next security model Jason A. Donenfeld <Jason(a)zx2c4.com> random: use first 128 bits of input as fast init Jason A. Donenfeld <Jason(a)zx2c4.com> random: do not use batches when !crng_ready() Jason A. Donenfeld <Jason(a)zx2c4.com> random: insist on random_get_entropy() existing in order to simplify Jason A. Donenfeld <Jason(a)zx2c4.com> xtensa: use fallback for random_get_entropy() instead of zero Jason A. Donenfeld <Jason(a)zx2c4.com> sparc: use fallback for random_get_entropy() instead of zero Jason A. Donenfeld <Jason(a)zx2c4.com> um: use fallback for random_get_entropy() instead of zero Jason A. Donenfeld <Jason(a)zx2c4.com> x86/tsc: Use fallback for random_get_entropy() instead of zero Jason A. Donenfeld <Jason(a)zx2c4.com> nios2: use fallback for random_get_entropy() instead of zero Jason A. Donenfeld <Jason(a)zx2c4.com> arm: use fallback for random_get_entropy() instead of zero Jason A. Donenfeld <Jason(a)zx2c4.com> mips: use fallback for random_get_entropy() instead of just c0 random Jason A. Donenfeld <Jason(a)zx2c4.com> riscv: use fallback for random_get_entropy() instead of zero Jason A. Donenfeld <Jason(a)zx2c4.com> m68k: use fallback for random_get_entropy() instead of zero Jason A. Donenfeld <Jason(a)zx2c4.com> timekeeping: Add raw clock fallback for random_get_entropy() Jason A. Donenfeld <Jason(a)zx2c4.com> powerpc: define get_cycles macro for arch-override Jason A. Donenfeld <Jason(a)zx2c4.com> alpha: define get_cycles macro for arch-override Jason A. Donenfeld <Jason(a)zx2c4.com> parisc: define get_cycles macro for arch-override Jason A. Donenfeld <Jason(a)zx2c4.com> s390: define get_cycles macro for arch-override Jason A. Donenfeld <Jason(a)zx2c4.com> ia64: define get_cycles macro for arch-override Jason A. Donenfeld <Jason(a)zx2c4.com> init: call time_init() before rand_initialize() Jason A. Donenfeld <Jason(a)zx2c4.com> random: fix sysctl documentation nits Jason A. Donenfeld <Jason(a)zx2c4.com> random: document crng_fast_key_erasure() destination possibility Jason A. Donenfeld <Jason(a)zx2c4.com> random: make random_get_entropy() return an unsigned long Jason A. Donenfeld <Jason(a)zx2c4.com> random: allow partial reads if later user copies fail Jason A. Donenfeld <Jason(a)zx2c4.com> random: check for signals every PAGE_SIZE chunk of /dev/[u]random Jann Horn <jannh(a)google.com> random: check for signal_pending() outside of need_resched() check Jason A. Donenfeld <Jason(a)zx2c4.com> random: do not allow user to keep crng key around on stack Jan Varho <jan.varho(a)gmail.com> random: do not split fast init input in add_hwgenerator_randomness() Jason A. Donenfeld <Jason(a)zx2c4.com> random: mix build-time latent entropy into pool at init Jason A. Donenfeld <Jason(a)zx2c4.com> random: re-add removed comment about get_random_{u32,u64} reseeding Jason A. Donenfeld <Jason(a)zx2c4.com> random: treat bootloader trust toggle the same way as cpu trust toggle Jason A. Donenfeld <Jason(a)zx2c4.com> random: skip fast_init if hwrng provides large chunk of entropy Jason A. Donenfeld <Jason(a)zx2c4.com> random: check for signal and try earlier when generating entropy Jason A. Donenfeld <Jason(a)zx2c4.com> random: reseed more often immediately after booting Jason A. Donenfeld <Jason(a)zx2c4.com> random: make consistent usage of crng_ready() Jason A. Donenfeld <Jason(a)zx2c4.com> random: use SipHash as interrupt entropy accumulator Jason A. Donenfeld <Jason(a)zx2c4.com> random: replace custom notifier chain with standard one Jason A. Donenfeld <Jason(a)zx2c4.com> random: don't let 644 read-only sysctls be written to Jason A. Donenfeld <Jason(a)zx2c4.com> random: give sysctl_random_min_urandom_seed a more sensible value Jason A. Donenfeld <Jason(a)zx2c4.com> random: do crng pre-init loading in worker rather than irq Jason A. Donenfeld <Jason(a)zx2c4.com> random: unify cycles_t and jiffies usage and types Jason A. Donenfeld <Jason(a)zx2c4.com> random: cleanup UUID handling Jason A. Donenfeld <Jason(a)zx2c4.com> random: only wake up writers after zap if threshold was passed Jason A. Donenfeld <Jason(a)zx2c4.com> random: round-robin registers as ulong, not u32 Jason A. Donenfeld <Jason(a)zx2c4.com> random: clear fast pool, crng, and batches in cpuhp bring up Jason A. Donenfeld <Jason(a)zx2c4.com> random: pull add_hwgenerator_randomness() declaration into random.h Jason A. Donenfeld <Jason(a)zx2c4.com> random: check for crng_init == 0 in add_device_randomness() Jason A. Donenfeld <Jason(a)zx2c4.com> random: unify early init crng load accounting Jason A. Donenfeld <Jason(a)zx2c4.com> random: do not take pool spinlock at boot Jason A. Donenfeld <Jason(a)zx2c4.com> random: defer fast pool mixing to worker Jason A. Donenfeld <Jason(a)zx2c4.com> random: rewrite header introductory comment Jason A. Donenfeld <Jason(a)zx2c4.com> random: group sysctl functions Jason A. Donenfeld <Jason(a)zx2c4.com> random: group userspace read/write functions Jason A. Donenfeld <Jason(a)zx2c4.com> random: group entropy collection functions Jason A. Donenfeld <Jason(a)zx2c4.com> random: group entropy extraction functions Jason A. Donenfeld <Jason(a)zx2c4.com> random: group crng functions Jason A. Donenfeld <Jason(a)zx2c4.com> random: group initialization wait functions Jason A. Donenfeld <Jason(a)zx2c4.com> random: remove whitespace and reorder includes Jason A. Donenfeld <Jason(a)zx2c4.com> random: remove useless header comment Jason A. Donenfeld <Jason(a)zx2c4.com> random: introduce drain_entropy() helper to declutter crng_reseed() Jason A. Donenfeld <Jason(a)zx2c4.com> random: deobfuscate irq u32/u64 contributions Jason A. Donenfeld <Jason(a)zx2c4.com> random: add proper SPDX header Jason A. Donenfeld <Jason(a)zx2c4.com> random: remove unused tracepoints Jason A. Donenfeld <Jason(a)zx2c4.com> random: remove ifdef'd out interrupt bench Jason A. Donenfeld <Jason(a)zx2c4.com> random: tie batched entropy generation to base_crng generation Dominik Brodowski <linux(a)dominikbrodowski.net> random: fix locking for crng_init in crng_reseed() Jason A. Donenfeld <Jason(a)zx2c4.com> random: zero buffer after reading entropy from userspace Jason A. Donenfeld <Jason(a)zx2c4.com> random: remove outdated INT_MAX >> 6 check in urandom_read() Jason A. Donenfeld <Jason(a)zx2c4.com> random: make more consistent use of integer types Jason A. Donenfeld <Jason(a)zx2c4.com> random: use hash function for crng_slow_load() Jason A. Donenfeld <Jason(a)zx2c4.com> random: use simpler fast key erasure flow on per-cpu keys Jason A. Donenfeld <Jason(a)zx2c4.com> random: absorb fast pool into input pool after fast load Jason A. Donenfeld <Jason(a)zx2c4.com> random: do not xor RDRAND when writing into /dev/random Jason A. Donenfeld <Jason(a)zx2c4.com> random: ensure early RDSEED goes through mixer on init Jason A. Donenfeld <Jason(a)zx2c4.com> random: inline leaves of rand_initialize() Jason A. Donenfeld <Jason(a)zx2c4.com> random: get rid of secondary crngs Jason A. Donenfeld <Jason(a)zx2c4.com> random: use RDSEED instead of RDRAND in entropy extraction Dominik Brodowski <linux(a)dominikbrodowski.net> random: fix locking in crng_fast_load() Jason A. Donenfeld <Jason(a)zx2c4.com> random: remove batched entropy locking Eric Biggers <ebiggers(a)google.com> random: remove use_input_pool parameter from crng_reseed() Jason A. Donenfeld <Jason(a)zx2c4.com> random: make credit_entropy_bits() always safe Jason A. Donenfeld <Jason(a)zx2c4.com> random: always wake up entropy writers after extraction Jason A. Donenfeld <Jason(a)zx2c4.com> random: use linear min-entropy accumulation crediting Jason A. Donenfeld <Jason(a)zx2c4.com> random: simplify entropy debiting Jason A. Donenfeld <Jason(a)zx2c4.com> random: use computational hash for entropy extraction Dominik Brodowski <linux(a)dominikbrodowski.net> random: only call crng_finalize_init() for primary_crng Dominik Brodowski <linux(a)dominikbrodowski.net> random: access primary_pool directly rather than through pointer Dominik Brodowski <linux(a)dominikbrodowski.net> random: continually use hwgenerator randomness Jason A. Donenfeld <Jason(a)zx2c4.com> random: simplify arithmetic function flow in account() Jason A. Donenfeld <Jason(a)zx2c4.com> random: selectively clang-format where it makes sense Jason A. Donenfeld <Jason(a)zx2c4.com> random: access input_pool_data directly rather than through pointer Jason A. Donenfeld <Jason(a)zx2c4.com> random: cleanup fractional entropy shift constants Jason A. Donenfeld <Jason(a)zx2c4.com> random: prepend remaining pool constants with POOL_ Jason A. Donenfeld <Jason(a)zx2c4.com> random: de-duplicate INPUT_POOL constants Jason A. Donenfeld <Jason(a)zx2c4.com> random: remove unused OUTPUT_POOL constants Jason A. Donenfeld <Jason(a)zx2c4.com> random: rather than entropy_store abstraction, use global Jason A. Donenfeld <Jason(a)zx2c4.com> random: remove unused extract_entropy() reserved argument Jason A. Donenfeld <Jason(a)zx2c4.com> random: remove incomplete last_data logic Jason A. Donenfeld <Jason(a)zx2c4.com> random: cleanup integer types Jason A. Donenfeld <Jason(a)zx2c4.com> random: cleanup poolinfo abstraction Schspa Shi <schspa(a)gmail.com> random: fix typo in comments Jann Horn <jannh(a)google.com> random: don't reset crng_init_cnt on urandom_read() Jason A. Donenfeld <Jason(a)zx2c4.com> random: avoid superfluous call to RDRAND in CRNG extraction Dominik Brodowski <linux(a)dominikbrodowski.net> random: early initialization of ChaCha constants Jason A. Donenfeld <Jason(a)zx2c4.com> random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs Dominik Brodowski <linux(a)dominikbrodowski.net> random: harmonize "crng init done" messages Jason A. Donenfeld <Jason(a)zx2c4.com> random: mix bootloader randomness into pool Jason A. Donenfeld <Jason(a)zx2c4.com> random: do not re-init if crng_reseed completes before primary init Jason A. Donenfeld <Jason(a)zx2c4.com> random: do not sign extend bytes for rotation when mixing Jason A. Donenfeld <Jason(a)zx2c4.com> random: use BLAKE2s instead of SHA1 in extraction Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> random: remove unused irq_flags argument from add_interrupt_randomness() Mark Brown <broonie(a)kernel.org> random: document add_hwgenerator_randomness() with other input functions Jason A. Donenfeld <Jason(a)zx2c4.com> lib/crypto: blake2s: avoid indirect calls to compression function for Clang CFI Jason A. Donenfeld <Jason(a)zx2c4.com> lib/crypto: sha1: re-roll loops to reduce code size Jason A. Donenfeld <Jason(a)zx2c4.com> lib/crypto: blake2s: move hmac construction into wireguard Jason A. Donenfeld <Jason(a)zx2c4.com> lib/crypto: blake2s: include as built-in Jason A. Donenfeld <Jason(a)zx2c4.com> MAINTAINERS: add git tree for random.c Jason A. Donenfeld <Jason(a)zx2c4.com> MAINTAINERS: co-maintain random.c Lorenzo Pieralisi <lorenzo.pieralisi(a)arm.com> ACPI: sysfs: Fix BERT error region memory mapping Magnus Karlsson <magnus.karlsson(a)intel.com> ice: fix crash at allocation failure Paolo Bonzini <pbonzini(a)redhat.com> KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID Basavaraj Natikar <Basavaraj.Natikar(a)amd.com> HID: amd_sfh: Add support for sensor discovery ------------- Diffstat: Documentation/admin-guide/kernel-parameters.txt | 6 + Documentation/admin-guide/sysctl/kernel.rst | 22 +- MAINTAINERS | 2 + Makefile | 4 +- arch/alpha/include/asm/timex.h | 1 + arch/arm/crypto/Makefile | 4 +- arch/arm/crypto/blake2s-core.S | 8 +- arch/arm/crypto/blake2s-glue.c | 73 +- arch/arm/crypto/blake2s-shash.c | 75 + arch/arm/include/asm/timex.h | 1 + arch/ia64/include/asm/timex.h | 1 + arch/m68k/include/asm/timex.h | 2 +- arch/mips/include/asm/timex.h | 17 +- arch/nios2/include/asm/timex.h | 3 + arch/parisc/include/asm/timex.h | 3 +- arch/powerpc/include/asm/timex.h | 1 + arch/riscv/include/asm/timex.h | 2 +- arch/s390/include/asm/timex.h | 1 + arch/sparc/include/asm/timex_32.h | 4 +- arch/um/include/asm/timex.h | 9 +- arch/x86/crypto/Makefile | 4 +- arch/x86/crypto/blake2s-glue.c | 68 +- arch/x86/crypto/blake2s-shash.c | 77 + arch/x86/include/asm/timex.h | 9 + arch/x86/include/asm/tsc.h | 7 +- arch/x86/kernel/cpu/mshyperv.c | 2 +- arch/x86/kvm/mmu/mmu.c | 6 +- arch/xtensa/include/asm/timex.h | 6 +- crypto/Kconfig | 3 +- crypto/blake2s_generic.c | 4 +- crypto/drbg.c | 17 +- drivers/acpi/sysfs.c | 25 +- drivers/char/Kconfig | 3 +- drivers/char/hw_random/core.c | 1 + drivers/char/random.c | 3011 +++++++++-------------- drivers/hid/amd-sfh-hid/amd_sfh_client.c | 11 + drivers/hid/amd-sfh-hid/amd_sfh_pcie.c | 7 + drivers/hid/amd-sfh-hid/amd_sfh_pcie.h | 4 + drivers/hv/vmbus_drv.c | 2 +- drivers/net/Kconfig | 1 - drivers/net/ethernet/intel/ice/ice_xsk.c | 2 +- drivers/net/wireguard/noise.c | 45 +- include/crypto/blake2s.h | 3 - include/crypto/chacha.h | 15 +- include/crypto/drbg.h | 2 +- include/crypto/internal/blake2s.h | 46 +- include/linux/cpuhotplug.h | 2 + include/linux/hw_random.h | 2 - include/linux/mm.h | 1 + include/linux/prandom.h | 23 +- include/linux/random.h | 100 +- include/linux/siphash.h | 28 + include/linux/timex.h | 10 +- include/trace/events/random.h | 247 -- init/main.c | 13 +- kernel/cpu.c | 11 + kernel/irq/handle.c | 2 +- kernel/time/timekeeping.c | 15 + lib/Kconfig.debug | 3 +- lib/crypto/Kconfig | 23 +- lib/crypto/Makefile | 9 +- lib/crypto/blake2s-generic.c | 6 +- lib/crypto/blake2s-selftest.c | 31 - lib/crypto/blake2s.c | 47 +- lib/random32.c | 16 +- lib/sha1.c | 95 +- lib/siphash.c | 32 +- lib/vsprintf.c | 10 +- mm/util.c | 32 + sound/pci/ctxfi/ctatc.c | 2 + sound/pci/ctxfi/cthardware.h | 3 +- 71 files changed, 1683 insertions(+), 2700 deletions(-)

2 years, 7 months

7
151
0 0

[PATCH 5.17 000/111] 5.17.12-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.17.12 release. There are 111 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun, 29 May 2022 08:46:36 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.17.12-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.17.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.17.12-rc1 Edward Matijevic <motolav(a)gmail.com> ALSA: ctxfi: Add SB046x PCI ID Lorenzo Pieralisi <lorenzo.pieralisi(a)arm.com> ACPI: sysfs: Fix BERT error region memory mapping Jason A. Donenfeld <Jason(a)zx2c4.com> random: check for signals after page of pool writes Jens Axboe <axboe(a)kernel.dk> random: wire up fops->splice_{read,write}_iter() Jens Axboe <axboe(a)kernel.dk> random: convert to using fops->write_iter() Jens Axboe <axboe(a)kernel.dk> random: convert to using fops->read_iter() Jason A. Donenfeld <Jason(a)zx2c4.com> random: unify batched entropy implementations Jason A. Donenfeld <Jason(a)zx2c4.com> random: move randomize_page() into mm where it belongs Jason A. Donenfeld <Jason(a)zx2c4.com> random: move initialization functions out of hot pages Jason A. Donenfeld <Jason(a)zx2c4.com> random: make consistent use of buf and len Jason A. Donenfeld <Jason(a)zx2c4.com> random: use proper return types on get_random_{int,long}_wait() Jason A. Donenfeld <Jason(a)zx2c4.com> random: remove extern from functions in header Jason A. Donenfeld <Jason(a)zx2c4.com> random: use static branch for crng_ready() Jason A. Donenfeld <Jason(a)zx2c4.com> random: credit architectural init the exact amount Jason A. Donenfeld <Jason(a)zx2c4.com> random: handle latent entropy and command line from random_init() Jason A. Donenfeld <Jason(a)zx2c4.com> random: use proper jiffies comparison macro Jason A. Donenfeld <Jason(a)zx2c4.com> random: remove ratelimiting for in-kernel unseeded randomness Jason A. Donenfeld <Jason(a)zx2c4.com> random: move initialization out of reseeding hot path Jason A. Donenfeld <Jason(a)zx2c4.com> random: avoid initializing twice in credit race Jason A. Donenfeld <Jason(a)zx2c4.com> random: use symbolic constants for crng_init states Jason A. Donenfeld <Jason(a)zx2c4.com> siphash: use one source of truth for siphash permutations Jason A. Donenfeld <Jason(a)zx2c4.com> random: help compiler out with fast_mix() by using simpler arguments Jason A. Donenfeld <Jason(a)zx2c4.com> random: do not use input pool from hard IRQs Jason A. Donenfeld <Jason(a)zx2c4.com> random: order timer entropy functions below interrupt functions Jason A. Donenfeld <Jason(a)zx2c4.com> random: do not pretend to handle premature next security model Jason A. Donenfeld <Jason(a)zx2c4.com> random: use first 128 bits of input as fast init Jason A. Donenfeld <Jason(a)zx2c4.com> random: do not use batches when !crng_ready() Jason A. Donenfeld <Jason(a)zx2c4.com> random: insist on random_get_entropy() existing in order to simplify Jason A. Donenfeld <Jason(a)zx2c4.com> xtensa: use fallback for random_get_entropy() instead of zero Jason A. Donenfeld <Jason(a)zx2c4.com> sparc: use fallback for random_get_entropy() instead of zero Jason A. Donenfeld <Jason(a)zx2c4.com> um: use fallback for random_get_entropy() instead of zero Jason A. Donenfeld <Jason(a)zx2c4.com> x86/tsc: Use fallback for random_get_entropy() instead of zero Jason A. Donenfeld <Jason(a)zx2c4.com> nios2: use fallback for random_get_entropy() instead of zero Jason A. Donenfeld <Jason(a)zx2c4.com> arm: use fallback for random_get_entropy() instead of zero Jason A. Donenfeld <Jason(a)zx2c4.com> mips: use fallback for random_get_entropy() instead of just c0 random Jason A. Donenfeld <Jason(a)zx2c4.com> riscv: use fallback for random_get_entropy() instead of zero Jason A. Donenfeld <Jason(a)zx2c4.com> m68k: use fallback for random_get_entropy() instead of zero Jason A. Donenfeld <Jason(a)zx2c4.com> timekeeping: Add raw clock fallback for random_get_entropy() Jason A. Donenfeld <Jason(a)zx2c4.com> powerpc: define get_cycles macro for arch-override Jason A. Donenfeld <Jason(a)zx2c4.com> alpha: define get_cycles macro for arch-override Jason A. Donenfeld <Jason(a)zx2c4.com> parisc: define get_cycles macro for arch-override Jason A. Donenfeld <Jason(a)zx2c4.com> s390: define get_cycles macro for arch-override Jason A. Donenfeld <Jason(a)zx2c4.com> ia64: define get_cycles macro for arch-override Jason A. Donenfeld <Jason(a)zx2c4.com> init: call time_init() before rand_initialize() Jason A. Donenfeld <Jason(a)zx2c4.com> random: fix sysctl documentation nits Jason A. Donenfeld <Jason(a)zx2c4.com> random: document crng_fast_key_erasure() destination possibility Jason A. Donenfeld <Jason(a)zx2c4.com> random: make random_get_entropy() return an unsigned long Jason A. Donenfeld <Jason(a)zx2c4.com> random: allow partial reads if later user copies fail Jason A. Donenfeld <Jason(a)zx2c4.com> random: check for signals every PAGE_SIZE chunk of /dev/[u]random Jann Horn <jannh(a)google.com> random: check for signal_pending() outside of need_resched() check Jason A. Donenfeld <Jason(a)zx2c4.com> random: do not allow user to keep crng key around on stack Jan Varho <jan.varho(a)gmail.com> random: do not split fast init input in add_hwgenerator_randomness() Jason A. Donenfeld <Jason(a)zx2c4.com> random: mix build-time latent entropy into pool at init Jason A. Donenfeld <Jason(a)zx2c4.com> random: re-add removed comment about get_random_{u32,u64} reseeding Jason A. Donenfeld <Jason(a)zx2c4.com> random: treat bootloader trust toggle the same way as cpu trust toggle Jason A. Donenfeld <Jason(a)zx2c4.com> random: skip fast_init if hwrng provides large chunk of entropy Jason A. Donenfeld <Jason(a)zx2c4.com> random: check for signal and try earlier when generating entropy Jason A. Donenfeld <Jason(a)zx2c4.com> random: reseed more often immediately after booting Jason A. Donenfeld <Jason(a)zx2c4.com> random: make consistent usage of crng_ready() Jason A. Donenfeld <Jason(a)zx2c4.com> random: use SipHash as interrupt entropy accumulator Jason A. Donenfeld <Jason(a)zx2c4.com> random: replace custom notifier chain with standard one Jason A. Donenfeld <Jason(a)zx2c4.com> random: don't let 644 read-only sysctls be written to Jason A. Donenfeld <Jason(a)zx2c4.com> random: give sysctl_random_min_urandom_seed a more sensible value Jason A. Donenfeld <Jason(a)zx2c4.com> random: do crng pre-init loading in worker rather than irq Jason A. Donenfeld <Jason(a)zx2c4.com> random: unify cycles_t and jiffies usage and types Jason A. Donenfeld <Jason(a)zx2c4.com> random: cleanup UUID handling Jason A. Donenfeld <Jason(a)zx2c4.com> random: only wake up writers after zap if threshold was passed Jason A. Donenfeld <Jason(a)zx2c4.com> random: round-robin registers as ulong, not u32 Jason A. Donenfeld <Jason(a)zx2c4.com> random: clear fast pool, crng, and batches in cpuhp bring up Jason A. Donenfeld <Jason(a)zx2c4.com> random: pull add_hwgenerator_randomness() declaration into random.h Jason A. Donenfeld <Jason(a)zx2c4.com> random: check for crng_init == 0 in add_device_randomness() Jason A. Donenfeld <Jason(a)zx2c4.com> random: unify early init crng load accounting Jason A. Donenfeld <Jason(a)zx2c4.com> random: do not take pool spinlock at boot Jason A. Donenfeld <Jason(a)zx2c4.com> random: defer fast pool mixing to worker Jason A. Donenfeld <Jason(a)zx2c4.com> random: rewrite header introductory comment Jason A. Donenfeld <Jason(a)zx2c4.com> random: group sysctl functions Jason A. Donenfeld <Jason(a)zx2c4.com> random: group userspace read/write functions Jason A. Donenfeld <Jason(a)zx2c4.com> random: group entropy collection functions Jason A. Donenfeld <Jason(a)zx2c4.com> random: group entropy extraction functions Jason A. Donenfeld <Jason(a)zx2c4.com> random: group crng functions Jason A. Donenfeld <Jason(a)zx2c4.com> random: group initialization wait functions Jason A. Donenfeld <Jason(a)zx2c4.com> random: remove whitespace and reorder includes Jason A. Donenfeld <Jason(a)zx2c4.com> random: remove useless header comment Jason A. Donenfeld <Jason(a)zx2c4.com> random: introduce drain_entropy() helper to declutter crng_reseed() Jason A. Donenfeld <Jason(a)zx2c4.com> random: deobfuscate irq u32/u64 contributions Jason A. Donenfeld <Jason(a)zx2c4.com> random: add proper SPDX header Jason A. Donenfeld <Jason(a)zx2c4.com> random: remove unused tracepoints Jason A. Donenfeld <Jason(a)zx2c4.com> random: remove ifdef'd out interrupt bench Jason A. Donenfeld <Jason(a)zx2c4.com> random: tie batched entropy generation to base_crng generation Dominik Brodowski <linux(a)dominikbrodowski.net> random: fix locking for crng_init in crng_reseed() Jason A. Donenfeld <Jason(a)zx2c4.com> random: zero buffer after reading entropy from userspace Jason A. Donenfeld <Jason(a)zx2c4.com> random: remove outdated INT_MAX >> 6 check in urandom_read() Jason A. Donenfeld <Jason(a)zx2c4.com> random: make more consistent use of integer types Jason A. Donenfeld <Jason(a)zx2c4.com> random: use hash function for crng_slow_load() Jason A. Donenfeld <Jason(a)zx2c4.com> random: use simpler fast key erasure flow on per-cpu keys Jason A. Donenfeld <Jason(a)zx2c4.com> random: absorb fast pool into input pool after fast load Jason A. Donenfeld <Jason(a)zx2c4.com> random: do not xor RDRAND when writing into /dev/random Jason A. Donenfeld <Jason(a)zx2c4.com> random: ensure early RDSEED goes through mixer on init Jason A. Donenfeld <Jason(a)zx2c4.com> random: inline leaves of rand_initialize() Jason A. Donenfeld <Jason(a)zx2c4.com> random: get rid of secondary crngs Jason A. Donenfeld <Jason(a)zx2c4.com> random: use RDSEED instead of RDRAND in entropy extraction Dominik Brodowski <linux(a)dominikbrodowski.net> random: fix locking in crng_fast_load() Jason A. Donenfeld <Jason(a)zx2c4.com> random: remove batched entropy locking Eric Biggers <ebiggers(a)google.com> random: remove use_input_pool parameter from crng_reseed() Jason A. Donenfeld <Jason(a)zx2c4.com> random: make credit_entropy_bits() always safe Jason A. Donenfeld <Jason(a)zx2c4.com> random: always wake up entropy writers after extraction Jason A. Donenfeld <Jason(a)zx2c4.com> random: use linear min-entropy accumulation crediting Jason A. Donenfeld <Jason(a)zx2c4.com> random: simplify entropy debiting Jason A. Donenfeld <Jason(a)zx2c4.com> random: use computational hash for entropy extraction Paolo Bonzini <pbonzini(a)redhat.com> KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID Basavaraj Natikar <Basavaraj.Natikar(a)amd.com> HID: amd_sfh: Add support for sensor discovery ------------- Diffstat: Documentation/admin-guide/kernel-parameters.txt | 6 + Documentation/admin-guide/sysctl/kernel.rst | 22 +- Makefile | 4 +- arch/alpha/include/asm/timex.h | 1 + arch/arm/include/asm/timex.h | 1 + arch/ia64/include/asm/timex.h | 1 + arch/m68k/include/asm/timex.h | 2 +- arch/mips/include/asm/timex.h | 17 +- arch/nios2/include/asm/timex.h | 3 + arch/parisc/include/asm/timex.h | 3 +- arch/powerpc/include/asm/timex.h | 1 + arch/riscv/include/asm/timex.h | 2 +- arch/s390/include/asm/timex.h | 1 + arch/sparc/include/asm/timex_32.h | 4 +- arch/um/include/asm/timex.h | 9 +- arch/x86/include/asm/timex.h | 9 + arch/x86/include/asm/tsc.h | 7 +- arch/x86/kvm/mmu/mmu.c | 6 +- arch/xtensa/include/asm/timex.h | 6 +- drivers/acpi/sysfs.c | 25 +- drivers/char/Kconfig | 3 +- drivers/char/hw_random/core.c | 1 + drivers/char/random.c | 2868 +++++++++-------------- drivers/hid/amd-sfh-hid/amd_sfh_client.c | 11 + drivers/hid/amd-sfh-hid/amd_sfh_pcie.c | 7 + drivers/hid/amd-sfh-hid/amd_sfh_pcie.h | 4 + include/linux/cpuhotplug.h | 2 + include/linux/hw_random.h | 2 - include/linux/mm.h | 1 + include/linux/prandom.h | 23 +- include/linux/random.h | 100 +- include/linux/siphash.h | 28 + include/linux/timex.h | 10 +- include/trace/events/random.h | 233 -- init/main.c | 13 +- kernel/cpu.c | 11 + kernel/time/timekeeping.c | 15 + lib/Kconfig.debug | 3 +- lib/random32.c | 14 +- lib/siphash.c | 32 +- lib/vsprintf.c | 10 +- mm/util.c | 32 + sound/pci/ctxfi/ctatc.c | 2 + sound/pci/ctxfi/cthardware.h | 3 +- 44 files changed, 1365 insertions(+), 2193 deletions(-)

2 years, 7 months

7
117
0 0

Re: [PATCH] riscv: read-only pages should not be writable

by Heinrich Schuchardt

On 5/28/22 11:13, Ard Biesheuvel wrote: > On Sat, 28 May 2022 at 03:41, Heinrich Schuchardt > <heinrich.schuchardt(a)canonical.com> wrote: >> >> If EFI pages are marked as read-only, >> we should remove the _PAGE_WRITE flag. >> >> The current code overwrites an unused value. >> >> Fixes: b91540d52a08b ("RISC-V: Add EFI runtime services") >> Signed-off-by: Heinrich Schuchardt <heinrich.schuchardt(a)canonical.com> >> --- >> arch/riscv/kernel/efi.c | 2 +- >> 1 file changed, 1 insertion(+), 1 deletion(-) >> >> diff --git a/arch/riscv/kernel/efi.c b/arch/riscv/kernel/efi.c >> index 024159298231..1aa540350abd 100644 >> --- a/arch/riscv/kernel/efi.c >> +++ b/arch/riscv/kernel/efi.c >> @@ -65,7 +65,7 @@ static int __init set_permissions(pte_t *ptep, unsigned long addr, void *data) >> >> if (md->attribute & EFI_MEMORY_RO) { >> val = pte_val(pte) & ~_PAGE_WRITE; >> - val = pte_val(pte) | _PAGE_READ; >> + val |= _PAGE_READ; >> pte = __pte(val); >> } >> if (md->attribute & EFI_MEMORY_XP) { >> -- >> 2.36.1 >> > > Thanks Heinrich > > Queued in efi/urgent. I guess this should also be down-ported to 5.15 and 5.10. Best regards Heinrich

2 years, 7 months

1
0
0 0

INVESTMENT FUND URGENT ATTNTION

by Madam Wilai

ATTN/Sir I want to invest through your partnership with the fund in Cambodia security comp. Wilai

2 years, 7 months

1
0
0 0

[for-next][PATCH 19/23] ftrace: Clean up hash direct_functions on register failures

by Steven Rostedt

From: Song Liu <song(a)kernel.org> We see the following GPF when register_ftrace_direct fails: [ ] general protection fault, probably for non-canonical address \ 0x200000000000010: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC PTI [...] [ ] RIP: 0010:ftrace_find_rec_direct+0x53/0x70 [ ] Code: 48 c1 e0 03 48 03 42 08 48 8b 10 31 c0 48 85 d2 74 [...] [ ] RSP: 0018:ffffc9000138bc10 EFLAGS: 00010206 [ ] RAX: 0000000000000000 RBX: ffffffff813e0df0 RCX: 000000000000003b [ ] RDX: 0200000000000000 RSI: 000000000000000c RDI: ffffffff813e0df0 [ ] RBP: ffffffffa00a3000 R08: ffffffff81180ce0 R09: 0000000000000001 [ ] R10: ffffc9000138bc18 R11: 0000000000000001 R12: ffffffff813e0df0 [ ] R13: ffffffff813e0df0 R14: ffff888171b56400 R15: 0000000000000000 [ ] FS: 00007fa9420c7780(0000) GS:ffff888ff6a00000(0000) knlGS:000000000 [ ] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ ] CR2: 000000000770d000 CR3: 0000000107d50003 CR4: 0000000000370ee0 [ ] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ ] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ ] Call Trace: [ ] <TASK> [ ] register_ftrace_direct+0x54/0x290 [ ] ? render_sigset_t+0xa0/0xa0 [ ] bpf_trampoline_update+0x3f5/0x4a0 [ ] ? 0xffffffffa00a3000 [ ] bpf_trampoline_link_prog+0xa9/0x140 [ ] bpf_tracing_prog_attach+0x1dc/0x450 [ ] bpf_raw_tracepoint_open+0x9a/0x1e0 [ ] ? find_held_lock+0x2d/0x90 [ ] ? lock_release+0x150/0x430 [ ] __sys_bpf+0xbd6/0x2700 [ ] ? lock_is_held_type+0xd8/0x130 [ ] __x64_sys_bpf+0x1c/0x20 [ ] do_syscall_64+0x3a/0x80 [ ] entry_SYSCALL_64_after_hwframe+0x44/0xae [ ] RIP: 0033:0x7fa9421defa9 [ ] Code: 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 9 f8 [...] [ ] RSP: 002b:00007ffed743bd78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ ] RAX: ffffffffffffffda RBX: 00000000069d2480 RCX: 00007fa9421defa9 [ ] RDX: 0000000000000078 RSI: 00007ffed743bd80 RDI: 0000000000000011 [ ] RBP: 00007ffed743be00 R08: 0000000000bb7270 R09: 0000000000000000 [ ] R10: 00000000069da210 R11: 0000000000000246 R12: 0000000000000001 [ ] R13: 00007ffed743c4b0 R14: 00000000069d2480 R15: 0000000000000001 [ ] </TASK> [ ] Modules linked in: klp_vm(OK) [ ] ---[ end trace 0000000000000000 ]--- One way to trigger this is: 1. load a livepatch that patches kernel function xxx; 2. run bpftrace -e 'kfunc:xxx {}', this will fail (expected for now); 3. repeat #2 => gpf. This is because the entry is added to direct_functions, but not removed. Fix this by remove the entry from direct_functions when register_ftrace_direct fails. Also remove the last trailing space from ftrace.c, so we don't have to worry about it anymore. Link: https://lkml.kernel.org/r/20220524170839.900849-1-song@kernel.org Cc: stable(a)vger.kernel.org Fixes: 763e34e74bb7 ("ftrace: Add register_ftrace_direct()") Signed-off-by: Song Liu <song(a)kernel.org> Signed-off-by: Steven Rostedt (Google) <rostedt(a)goodmis.org> --- kernel/trace/ftrace.c | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/kernel/trace/ftrace.c b/kernel/trace/ftrace.c index fb8f08b4bd41..d653ef4febc5 100644 --- a/kernel/trace/ftrace.c +++ b/kernel/trace/ftrace.c @@ -4454,7 +4454,7 @@ int ftrace_func_mapper_add_ip(struct ftrace_func_mapper *mapper, * @ip: The instruction pointer address to remove the data from * * Returns the data if it is found, otherwise NULL. - * Note, if the data pointer is used as the data itself, (see + * Note, if the data pointer is used as the data itself, (see * ftrace_func_mapper_find_ip(), then the return value may be meaningless, * if the data pointer was set to zero. */ @@ -5188,8 +5188,6 @@ int register_ftrace_direct(unsigned long ip, unsigned long addr) goto out_unlock; ret = ftrace_set_filter_ip(&direct_ops, ip, 0, 0); - if (ret) - remove_hash_entry(direct_functions, entry); if (!ret && !(direct_ops.flags & FTRACE_OPS_FL_ENABLED)) { ret = register_ftrace_function(&direct_ops); @@ -5198,6 +5196,7 @@ int register_ftrace_direct(unsigned long ip, unsigned long addr) } if (ret) { + remove_hash_entry(direct_functions, entry); kfree(entry); if (!direct->count) { list_del_rcu(&direct->next); -- 2.35.1

2 years, 7 months

1
0
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror May 2022