1. 26 Apr, 2021 8 commits
    • Linus Torvalds's avatar
      Merge tag 'x86_alternatives_for_v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip · 2c5ce2db
      Linus Torvalds authored
      Pull x86 alternatives/paravirt updates from Borislav Petkov:
       "First big cleanup to the paravirt infra to use alternatives and thus
        eliminate custom code patching.
      
        For that, the alternatives infrastructure is extended to accomodate
        paravirt's needs and, as a result, a lot of paravirt patching code
        goes away, leading to a sizeable cleanup and simplification.
      
        Work by Juergen Gross"
      
      * tag 'x86_alternatives_for_v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/paravirt: Have only one paravirt patch function
        x86/paravirt: Switch functions with custom code to ALTERNATIVE
        x86/paravirt: Add new PVOP_ALT* macros to support pvops in ALTERNATIVEs
        x86/paravirt: Switch iret pvops to ALTERNATIVE
        x86/paravirt: Simplify paravirt macros
        x86/paravirt: Remove no longer needed 32-bit pvops cruft
        x86/paravirt: Add new features for paravirt patching
        x86/alternative: Use ALTERNATIVE_TERNARY() in _static_cpu_has()
        x86/alternative: Support ALTERNATIVE_TERNARY
        x86/alternative: Support not-feature
        x86/paravirt: Switch time pvops functions to use static_call()
        static_call: Add function to query current function
        static_call: Move struct static_call_key definition to static_call_types.h
        x86/alternative: Merge include files
        x86/alternative: Drop unused feature parameter from ALTINSTR_REPLACEMENT()
      2c5ce2db
    • Linus Torvalds's avatar
      Merge tag 'ras_core_for_v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip · 2c532791
      Linus Torvalds authored
      Pull x86 RAS update from Borislav Petkov:
       "Provide the ability to specify the IPID (IP block associated with the
        MCE, AMD-specific) when injecting an MCE"
      
      * tag 'ras_core_for_v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/mce/inject: Add IPID for injection too
      2c532791
    • Linus Torvalds's avatar
      Merge tag 'x86_microcode_for_v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip · 41acc109
      Linus Torvalds authored
      Pull x86 microcode update from Borislav Petkov:
       "A single fix to the late microcode loading machinery which corrects
        the ordering of when new microcode is loaded from the fs, vs checking
        whether all CPUs are online"
      
      * tag 'x86_microcode_for_v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/microcode: Check for offline CPUs before requesting new microcode
      41acc109
    • Linus Torvalds's avatar
      Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6 · a4a78bc8
      Linus Torvalds authored
      Pull crypto updates from Herbert Xu:
       "API:
      
         - crypto_destroy_tfm now ignores errors as well as NULL pointers
      
        Algorithms:
      
         - Add explicit curve IDs in ECDH algorithm names
      
         - Add NIST P384 curve parameters
      
         - Add ECDSA
      
        Drivers:
      
         - Add support for Green Sardine in ccp
      
         - Add ecdh/curve25519 to hisilicon/hpre
      
         - Add support for AM64 in sa2ul"
      
      * 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6: (184 commits)
        fsverity: relax build time dependency on CRYPTO_SHA256
        fscrypt: relax Kconfig dependencies for crypto API algorithms
        crypto: camellia - drop duplicate "depends on CRYPTO"
        crypto: s5p-sss - consistently use local 'dev' variable in probe()
        crypto: s5p-sss - remove unneeded local variable initialization
        crypto: s5p-sss - simplify getting of_device_id match data
        ccp: ccp - add support for Green Sardine
        crypto: ccp - Make ccp_dev_suspend and ccp_dev_resume void functions
        crypto: octeontx2 - add support for OcteonTX2 98xx CPT block.
        crypto: chelsio/chcr - Remove useless MODULE_VERSION
        crypto: ux500/cryp - Remove duplicate argument
        crypto: chelsio - remove unused function
        crypto: sa2ul - Add support for AM64
        crypto: sa2ul - Support for per channel coherency
        dt-bindings: crypto: ti,sa2ul: Add new compatible for AM64
        crypto: hisilicon - enable new error types for QM
        crypto: hisilicon - add new error type for SEC
        crypto: hisilicon - support new error types for ZIP
        crypto: hisilicon - dynamic configuration 'err_info'
        crypto: doc - fix kernel-doc notation in chacha.c and af_alg.c
        ...
      a4a78bc8
    • Linus Torvalds's avatar
      Merge tag 'tomoyo-pr-20210426' of git://git.osdn.net/gitroot/tomoyo/tomoyo-test1 · ffc766b3
      Linus Torvalds authored
      Pull lockdep capacity limit updates from Tetsuo Handa:
       "syzbot is occasionally reporting that fuzz testing is terminated due
        to hitting upper limits lockdep can track.
      
        Analysis via /proc/lockdep* did not show any obvious culprits, allow
        tuning tracing capacity constants"
      
      * tag 'tomoyo-pr-20210426' of git://git.osdn.net/gitroot/tomoyo/tomoyo-test1:
        lockdep: Allow tuning tracing capacity constants.
      ffc766b3
    • Linus Torvalds's avatar
      Merge tag 'keys-cve-2020-26541-v3' of... · b0e22b47
      Linus Torvalds authored
      Merge tag 'keys-cve-2020-26541-v3' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs
      
      Pull x509 dbx/mokx UEFI support from David Howells:
       "Here's a set of patches from Eric Snowberg[1] that add support for
        EFI_CERT_X509_GUID entries in the dbx and mokx UEFI tables (such
        entries cause matching certificates to be rejected).
      
        These are currently ignored and only the hash entries are made use of.
      
        Additionally Eric included his patches to allow such certificates to
        be preloaded.
      
        These patches deal with CVE-2020-26541.
      
        To quote Eric:
             'This is the fifth patch series for adding support for
              EFI_CERT_X509_GUID entries [2]. It has been expanded to not only
              include dbx entries but also entries in the mokx. Additionally
              my series to preload these certificate [3] has also been
              included'"
      
      Link: https://lore.kernel.org/r/20210122181054.32635-1-eric.snowberg@oracle.com [1]
      Link: https://patchwork.kernel.org/project/linux-security-module/patch/20200916004927.64276-1-eric.snowberg@oracle.com/ [2]
      Link: https://lore.kernel.org/patchwork/cover/1315485/ [3]
      
      * tag 'keys-cve-2020-26541-v3' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs:
        integrity: Load mokx variables into the blacklist keyring
        certs: Add ability to preload revocation certs
        certs: Move load_system_certificate_list to a common function
        certs: Add EFI_CERT_X509_GUID support for dbx entries
      b0e22b47
    • Linus Torvalds's avatar
      Merge tag 'queue' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/tpmdd · 87f27e7b
      Linus Torvalds authored
      Pull tpm fixes from James Bottomley:
       "Fix a regression in the TPM trusted keys caused by the generic rework
        to add ARM TEE based trusted keys.
      
        Without this fix, the TPM trusted key subsystem fails to add or load
        any keys"
      
      * tag 'queue' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/tpmdd:
        KEYS: trusted: fix TPM trusted keys for generic framework
      87f27e7b
    • Linus Torvalds's avatar
      Merge tag 'tpmdd-next-v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd · 7dd1ce1a
      Linus Torvalds authored
      Pull tpm updates from Jarkko Sakkinen:
       "New features:
      
         - ARM TEE backend for kernel trusted keys to complete the existing
           TPM backend
      
         - ASN.1 format for TPM2 trusted keys to make them interact with the
           user space stack, such as OpenConnect VPN
      
        Other than that, a bunch of bug fixes"
      
      * tag 'tpmdd-next-v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd:
        KEYS: trusted: Fix missing null return from kzalloc call
        char: tpm: fix error return code in tpm_cr50_i2c_tis_recv()
        MAINTAINERS: Add entry for TEE based Trusted Keys
        doc: trusted-encrypted: updates with TEE as a new trust source
        KEYS: trusted: Introduce TEE based Trusted Keys
        KEYS: trusted: Add generic trusted keys framework
        security: keys: trusted: Make sealed key properly interoperable
        security: keys: trusted: use ASN.1 TPM2 key format for the blobs
        security: keys: trusted: fix TPM2 authorizations
        oid_registry: Add TCG defined OIDS for TPM keys
        lib: Add ASN.1 encoder
        tpm: vtpm_proxy: Avoid reading host log when using a virtual device
        tpm: acpi: Check eventlog signature before using it
        tpm: efi: Use local variable for calculating final log size
      7dd1ce1a
  2. 25 Apr, 2021 6 commits
  3. 24 Apr, 2021 3 commits
  4. 23 Apr, 2021 17 commits
  5. 22 Apr, 2021 6 commits