1. 26 Apr, 2021 12 commits
    • Linus Torvalds's avatar
      Merge tag 'x86_sgx_for_v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip · 81a48979
      Linus Torvalds authored
      Pull x86 SGX updates from Borislav Petkov:
       "Add the guest side of SGX support in KVM guests. Work by Sean
        Christopherson, Kai Huang and Jarkko Sakkinen.
      
        Along with the usual fixes, cleanups and improvements"
      
      * tag 'x86_sgx_for_v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (21 commits)
        x86/sgx: Mark sgx_vepc_vm_ops static
        x86/sgx: Do not update sgx_nr_free_pages in sgx_setup_epc_section()
        x86/sgx: Move provisioning device creation out of SGX driver
        x86/sgx: Add helpers to expose ECREATE and EINIT to KVM
        x86/sgx: Add helper to update SGX_LEPUBKEYHASHn MSRs
        x86/sgx: Add encls_faulted() helper
        x86/sgx: Add SGX2 ENCLS leaf definitions (EAUG, EMODPR and EMODT)
        x86/sgx: Move ENCLS leaf definitions to sgx.h
        x86/sgx: Expose SGX architectural definitions to the kernel
        x86/sgx: Initialize virtual EPC driver even when SGX driver is disabled
        x86/cpu/intel: Allow SGX virtualization without Launch Control support
        x86/sgx: Introduce virtual EPC for use by KVM guests
        x86/sgx: Add SGX_CHILD_PRESENT hardware error code
        x86/sgx: Wipe out EREMOVE from sgx_free_epc_page()
        x86/cpufeatures: Add SGX1 and SGX2 sub-features
        x86/cpufeatures: Make SGX_LC feature bit depend on SGX bit
        x86/sgx: Remove unnecessary kmap() from sgx_ioc_enclave_init()
        selftests/sgx: Use getauxval() to simplify test code
        selftests/sgx: Improve error detection and messages
        x86/sgx: Add a basic NUMA allocation scheme to sgx_alloc_epc_page()
        ...
      81a48979
    • Linus Torvalds's avatar
      Merge tag 'x86_vmware_for_v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip · 47e12f14
      Linus Torvalds authored
      Pull x86 vmware guest update from Borislav Petkov:
       "Have vmware guests skip the refined TSC calibration when the TSC
        frequency has been retrieved from the hypervisor"
      
      * tag 'x86_vmware_for_v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/vmware: Avoid TSC recalibration when frequency is known
      47e12f14
    • Linus Torvalds's avatar
      Merge tag 'x86_seves_for_v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip · 26a4ef7e
      Linus Torvalds authored
      Pull x86 AMD secure virtualization (SEV-ES) updates from Borislav Petkov:
       "Add support for SEV-ES guests booting through the 32-bit boot path,
        along with cleanups, fixes and improvements"
      
      * tag 'x86_seves_for_v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/sev-es: Optimize __sev_es_ist_enter() for better readability
        x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
        x86/boot/compressed/64: Check SEV encryption in the 32-bit boot-path
        x86/boot/compressed/64: Add CPUID sanity check to 32-bit boot-path
        x86/boot/compressed/64: Add 32-bit boot #VC handler
        x86/boot/compressed/64: Setup IDT in startup_32 boot path
        x86/boot/compressed/64: Reload CS in startup_32
        x86/sev: Do not require Hypervisor CPUID bit for SEV guests
        x86/boot/compressed/64: Cleanup exception handling before booting kernel
        x86/virtio: Have SEV guests enforce restricted virtio memory access
        x86/sev-es: Remove subtraction of res variable
      26a4ef7e
    • Linus Torvalds's avatar
      Merge tag 'x86_misc_for_v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip · 98ee795b
      Linus Torvalds authored
      Pull x86 tool update from Borislav Petkov:
       "A new kcpuid tool to dump the raw CPUID leafs of a CPU.
      
        It has the CPUID bit definitions in a separate csv file which allows
        for adding support for new CPUID leafs and bits without having to
        update the tool.
      
        The main use case for the tool is hw enablement on preproduction x86
        hardware"
      
      * tag 'x86_misc_for_v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        tools/x86/kcpuid: Add AMD leaf 0x8000001E
        tools/x86/kcpuid: Check last token too
        selftests/x86: Add a missing .note.GNU-stack section to thunks_32.S
        tools/x86/kcpuid: Add AMD Secure Encryption leaf
        tools/x86: Add a kcpuid tool to show raw CPU features
      98ee795b
    • Linus Torvalds's avatar
      Merge tag 'x86_alternatives_for_v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip · 2c5ce2db
      Linus Torvalds authored
      Pull x86 alternatives/paravirt updates from Borislav Petkov:
       "First big cleanup to the paravirt infra to use alternatives and thus
        eliminate custom code patching.
      
        For that, the alternatives infrastructure is extended to accomodate
        paravirt's needs and, as a result, a lot of paravirt patching code
        goes away, leading to a sizeable cleanup and simplification.
      
        Work by Juergen Gross"
      
      * tag 'x86_alternatives_for_v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/paravirt: Have only one paravirt patch function
        x86/paravirt: Switch functions with custom code to ALTERNATIVE
        x86/paravirt: Add new PVOP_ALT* macros to support pvops in ALTERNATIVEs
        x86/paravirt: Switch iret pvops to ALTERNATIVE
        x86/paravirt: Simplify paravirt macros
        x86/paravirt: Remove no longer needed 32-bit pvops cruft
        x86/paravirt: Add new features for paravirt patching
        x86/alternative: Use ALTERNATIVE_TERNARY() in _static_cpu_has()
        x86/alternative: Support ALTERNATIVE_TERNARY
        x86/alternative: Support not-feature
        x86/paravirt: Switch time pvops functions to use static_call()
        static_call: Add function to query current function
        static_call: Move struct static_call_key definition to static_call_types.h
        x86/alternative: Merge include files
        x86/alternative: Drop unused feature parameter from ALTINSTR_REPLACEMENT()
      2c5ce2db
    • Linus Torvalds's avatar
      Merge tag 'ras_core_for_v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip · 2c532791
      Linus Torvalds authored
      Pull x86 RAS update from Borislav Petkov:
       "Provide the ability to specify the IPID (IP block associated with the
        MCE, AMD-specific) when injecting an MCE"
      
      * tag 'ras_core_for_v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/mce/inject: Add IPID for injection too
      2c532791
    • Linus Torvalds's avatar
      Merge tag 'x86_microcode_for_v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip · 41acc109
      Linus Torvalds authored
      Pull x86 microcode update from Borislav Petkov:
       "A single fix to the late microcode loading machinery which corrects
        the ordering of when new microcode is loaded from the fs, vs checking
        whether all CPUs are online"
      
      * tag 'x86_microcode_for_v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/microcode: Check for offline CPUs before requesting new microcode
      41acc109
    • Linus Torvalds's avatar
      Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6 · a4a78bc8
      Linus Torvalds authored
      Pull crypto updates from Herbert Xu:
       "API:
      
         - crypto_destroy_tfm now ignores errors as well as NULL pointers
      
        Algorithms:
      
         - Add explicit curve IDs in ECDH algorithm names
      
         - Add NIST P384 curve parameters
      
         - Add ECDSA
      
        Drivers:
      
         - Add support for Green Sardine in ccp
      
         - Add ecdh/curve25519 to hisilicon/hpre
      
         - Add support for AM64 in sa2ul"
      
      * 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6: (184 commits)
        fsverity: relax build time dependency on CRYPTO_SHA256
        fscrypt: relax Kconfig dependencies for crypto API algorithms
        crypto: camellia - drop duplicate "depends on CRYPTO"
        crypto: s5p-sss - consistently use local 'dev' variable in probe()
        crypto: s5p-sss - remove unneeded local variable initialization
        crypto: s5p-sss - simplify getting of_device_id match data
        ccp: ccp - add support for Green Sardine
        crypto: ccp - Make ccp_dev_suspend and ccp_dev_resume void functions
        crypto: octeontx2 - add support for OcteonTX2 98xx CPT block.
        crypto: chelsio/chcr - Remove useless MODULE_VERSION
        crypto: ux500/cryp - Remove duplicate argument
        crypto: chelsio - remove unused function
        crypto: sa2ul - Add support for AM64
        crypto: sa2ul - Support for per channel coherency
        dt-bindings: crypto: ti,sa2ul: Add new compatible for AM64
        crypto: hisilicon - enable new error types for QM
        crypto: hisilicon - add new error type for SEC
        crypto: hisilicon - support new error types for ZIP
        crypto: hisilicon - dynamic configuration 'err_info'
        crypto: doc - fix kernel-doc notation in chacha.c and af_alg.c
        ...
      a4a78bc8
    • Linus Torvalds's avatar
      Merge tag 'tomoyo-pr-20210426' of git://git.osdn.net/gitroot/tomoyo/tomoyo-test1 · ffc766b3
      Linus Torvalds authored
      Pull lockdep capacity limit updates from Tetsuo Handa:
       "syzbot is occasionally reporting that fuzz testing is terminated due
        to hitting upper limits lockdep can track.
      
        Analysis via /proc/lockdep* did not show any obvious culprits, allow
        tuning tracing capacity constants"
      
      * tag 'tomoyo-pr-20210426' of git://git.osdn.net/gitroot/tomoyo/tomoyo-test1:
        lockdep: Allow tuning tracing capacity constants.
      ffc766b3
    • Linus Torvalds's avatar
      Merge tag 'keys-cve-2020-26541-v3' of... · b0e22b47
      Linus Torvalds authored
      Merge tag 'keys-cve-2020-26541-v3' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs
      
      Pull x509 dbx/mokx UEFI support from David Howells:
       "Here's a set of patches from Eric Snowberg[1] that add support for
        EFI_CERT_X509_GUID entries in the dbx and mokx UEFI tables (such
        entries cause matching certificates to be rejected).
      
        These are currently ignored and only the hash entries are made use of.
      
        Additionally Eric included his patches to allow such certificates to
        be preloaded.
      
        These patches deal with CVE-2020-26541.
      
        To quote Eric:
             'This is the fifth patch series for adding support for
              EFI_CERT_X509_GUID entries [2]. It has been expanded to not only
              include dbx entries but also entries in the mokx. Additionally
              my series to preload these certificate [3] has also been
              included'"
      
      Link: https://lore.kernel.org/r/20210122181054.32635-1-eric.snowberg@oracle.com [1]
      Link: https://patchwork.kernel.org/project/linux-security-module/patch/20200916004927.64276-1-eric.snowberg@oracle.com/ [2]
      Link: https://lore.kernel.org/patchwork/cover/1315485/ [3]
      
      * tag 'keys-cve-2020-26541-v3' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs:
        integrity: Load mokx variables into the blacklist keyring
        certs: Add ability to preload revocation certs
        certs: Move load_system_certificate_list to a common function
        certs: Add EFI_CERT_X509_GUID support for dbx entries
      b0e22b47
    • Linus Torvalds's avatar
      Merge tag 'queue' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/tpmdd · 87f27e7b
      Linus Torvalds authored
      Pull tpm fixes from James Bottomley:
       "Fix a regression in the TPM trusted keys caused by the generic rework
        to add ARM TEE based trusted keys.
      
        Without this fix, the TPM trusted key subsystem fails to add or load
        any keys"
      
      * tag 'queue' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/tpmdd:
        KEYS: trusted: fix TPM trusted keys for generic framework
      87f27e7b
    • Linus Torvalds's avatar
      Merge tag 'tpmdd-next-v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd · 7dd1ce1a
      Linus Torvalds authored
      Pull tpm updates from Jarkko Sakkinen:
       "New features:
      
         - ARM TEE backend for kernel trusted keys to complete the existing
           TPM backend
      
         - ASN.1 format for TPM2 trusted keys to make them interact with the
           user space stack, such as OpenConnect VPN
      
        Other than that, a bunch of bug fixes"
      
      * tag 'tpmdd-next-v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd:
        KEYS: trusted: Fix missing null return from kzalloc call
        char: tpm: fix error return code in tpm_cr50_i2c_tis_recv()
        MAINTAINERS: Add entry for TEE based Trusted Keys
        doc: trusted-encrypted: updates with TEE as a new trust source
        KEYS: trusted: Introduce TEE based Trusted Keys
        KEYS: trusted: Add generic trusted keys framework
        security: keys: trusted: Make sealed key properly interoperable
        security: keys: trusted: use ASN.1 TPM2 key format for the blobs
        security: keys: trusted: fix TPM2 authorizations
        oid_registry: Add TCG defined OIDS for TPM keys
        lib: Add ASN.1 encoder
        tpm: vtpm_proxy: Avoid reading host log when using a virtual device
        tpm: acpi: Check eventlog signature before using it
        tpm: efi: Use local variable for calculating final log size
      7dd1ce1a
  2. 25 Apr, 2021 6 commits
  3. 24 Apr, 2021 3 commits
  4. 23 Apr, 2021 17 commits
  5. 22 Apr, 2021 2 commits