summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Revert "patches: boot_time_opt: Minor patch context update"intel-5.10Alexandru Avadanii2022-07-122-2/+2
| | | | | | | This reverts commit 699b52d176cd7464af4444c88f9ea54d64d868a1. Change-Id: I84269e25e971031a6350ca475513b7d731dcb96d Signed-off-by: Alexandru Avadanii <Alexandru.Avadanii@enea.com>
* Fix kaudit warnings after hardknott refreshAlexandru Avadanii2022-07-0713-19/+224
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 1. 'CONFIG_XOR_BLOCKS' last val (m) and .config val (y) do not match * Previously we tried to configure this as 'm' to reduce the kernel footprint, but it is selected indirectly as 'y' via: CONFIG_MD_RAID456 (y, set by Intel x86 BSP) CONFIG_ASYNC_XOR CONFIG_XOR_BLOCKS 2. 'CONFIG_CRC_ITU_T' last val (m) and .config val (y) do not match * Upstream 'nfc-generic.cfg' sets this to 'm', but our 'mmc_sd_y.cfg' selects it as 'y' via: CONFIG_MMC_SPI (y) CONFIG_CRC_ITU_T 3. 'CONFIG_ISDN_CAPI' last val (y) and .config val (n) do not match * Upstream enables ISDN, but our kernel footprint reduction disables one of its dependencies (CONFIG_BT=n), make it explicit. 4. 'CONFIG_MEDIA_PLATFORM_SUPPORT' last val (y) and .config val (n) do not match * Upstream enables it, but our kernel footprint reduction disables one of its dependencies (CONFIG_MEDIA_SUPPORT=n), make it explicit. 5. 'CONFIG_*' (many similar options, all depending on CONFIG_IIO) last val (m) and .config val (n) do not match * Upstream enables them, but our kernel footprint reduction disables one of their dependencies (CONFIG_IIO=n) via 'accelerometers_n.cfg'; * create a new configuration fragment ('iio_n.scc') for this and gather all IIO dependencies that we want disabled to make them explicit (moving CONFIG_IIO=n from 'accelerometers_n.cfg' to 'iio_n.cfg'); * 'iio_n.cfg' contains all configuration from yocto-kernel-cache 'iio.cfg' (changing 'm' and/or 'y' to 'n'), including the options that were previously handled by existing features in: - features/accelerometers/accelerometers_n.cfg; - features/inclinometer/inclinometer_n.cfg; - features/hidsensor/hidsensor_n.cfg; * 'iio_n.scc' replaces the 3 old fragments, especially since they were always included together; 6. 'CONFIG_INPUT_SOC_BUTTON_ARRAY' last val (m) and .config val (n) do not match * Upstream enables it, but our kernel footprint reduction disables one of its dependencies (CONFIG_KEYBOARD_GPIO=n), make it explicit. 7. 'CONFIG_INTEL_SOC_PMIC' last val (y) and .config val (n) do not match * Upstream enables it, but our 'i2c_m.cfg' (when added to KERNEL_FEATURES) breaks two of its dependencies (CONFIG_I2C=y, I2C_DESIGNWARE_PLATFORM=y), make it explicit. 8. 'CONFIG_TYPEC_TCPM' last val (m) and .config val (n) do not match 'CONFIG_TYPEC_TCPCI' last val (m) and .config val (n) do not match * Upstream enables them, but our kernel footprint reduction disables one of their dependencies (CONFIG_TYPEC=n), make it explicit. 9. 'CONFIG_SERIO_I8042' last val (m) and .config val (n) do not match * We enable the SERIO_I8042 (wrongfully?) via 'keyboard_n.scc', but its dependency (CONFIG_SERIO) is already disabled by both 'input_n.scc' and 'serio_n.scc'. * re-order scc fragments to silence the warning without changing any actual configuration fragment; 10. 'CONFIG_PRINTER' last val (m) and .config val (n) do not match * Upstream enables it, but our kernel footprint reduction disables one of its dependencies (CONFIG_PARPORT=n), make it explicit. 11. 'CONFIG_USB_NET_RNDIS_HOST' last val (m) and .config val (n) do not match * Upstream enables it, but our kernel footprint reduction disables one of its dependencies (CONFIG_USBNET=n), make it explicit. 12. 'CONFIG_USB_GADGET_VBUS_DRAW' last val (2) and .config val (n) do not match (same with 'CONFIG_USB_GADGET_STORAGE_NUM_BUFFERS') * Both depend on 'USB_GADGET'. Change-Id: Id17c54348adbedcd110f0e4a456763797834c6a8 Signed-off-by: Alexandru Avadanii <Alexandru.Avadanii@enea.com>
* patches: boot_time_opt: Minor patch context updateAlexandru Avadanii2022-07-072-2/+2
| | | | | | | | | | Adjust patch context after bumping upstream kernel reference, which now includes [1]. [1] https://github.com/intel/linux-intel-lts/commit/8cc58a6e2 Change-Id: I017f40cda3cd246d7685660b1faf670a77d9569a Signed-off-by: Alexandru Avadanii <Alexandru.Avadanii@enea.com>
* Rename atom-c3000.cfg kernel configuration fileDragos Ciprian Nedelcu2021-08-123-1/+1
| | | | | | | atom-c3000.cfg renamed to enea-common-bsp.cfg Change-Id: I86d9426f402906dcdef7ad64fc37e3596a361210 Signed-off-by: Dragos Ciprian Nedelcu <Dragos.Ciprian.Nedelcu@enea.com>
* features/cpulist_abbrev: Fix "last" usageAlexandru Avadanii2021-07-071-7/+13
| | | | | | | | | | | | Adding support for "63" as an alias for "last", although working with "63", broke support for "last". Note: "last" and "63" cannot be used at the same time in an expression. Fixes: f86788bac0c8aaa0903aa2ef3b98ec0327a56d5b Change-Id: I865b7a9589e9aaf601a2c317201a4b3771db4cd2 Signed-off-by: Alexandru Avadanii <Alexandru.Avadanii@enea.com>
* features/cpulist_abbrev: Add "63" alias for "last"Alexandru Avadanii2021-07-062-0/+59
| | | | | Change-Id: Ie82d70f74f36f9c064411b2f8ef0a7391aee9284 Signed-off-by: Alexandru Avadanii <Alexandru.Avadanii@enea.com>
* features: Add IGC driver supportCatalin Iova2021-06-232-0/+5
| | | | | Change-Id: I628e711b78391e9474a708d963f3e1bfc00e0113 Signed-off-by: Catalin Iova <Catalin.Iova@enea.com>
* Fix kaudit warnings for guest kernelAlexandru Avadanii2021-06-223-1/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | 1. CONFIG_UNWINDER_FRAME_POINTER New in kernel v4.15+. Since we want to disable FRAME_POINTER, this one should be disabled too (or it will select FRAME_POINTER). Adding it will lead to honoring our FRAME_POINTER setting. Note that having a kernel unwinder is mandatory, so only disabling UNWINDER_FRAME_POINTER will automatically select UNWINDER_ORC on x86_64. Set CONFIG_UNWINDER_GUESS=y instead to avoid runtime overhead with the cost of having less precise debug information on kernel crashes. 2. CONFIG_REGMAP Selected by I2C_DESIGNWARE_CORE, which we enabled as a load-module. Adding it to i2c_m.cfg only silences the kaudit warning, as it is already selected. 3. CONFIG_BLK_DEV_SR reduced_kernel_footprint_guest: Remove config cdrom_n.scc, which is used as dependency by other features (cloud-init NoCloud on CDROM). Change-Id: I03f5f19c6ea535dfe90cae2068ffbdc99b07f8f4 Signed-off-by: Alexandru Avadanii <Alexandru.Avadanii@enea.com>
* features/ata/ata_piix_y: Add new fragmentAlexandru Avadanii2021-06-222-0/+5
| | | | | | | | | | This will be leveraged by the Enea Edge VNF guest kernel to enable inbuilt support for Intel ESB, ICH, PIIX3, PIIX4 PATA/SATA, required for early probing of cloud-init NoCloud datasource attached as CDROM. Change-Id: If7e595d034d5bc6b0c82f6845e79af34a1c6ac99 Signed-off-by: Alexandru Avadanii <Alexandru.Avadanii@enea.com>
* features: Add acpi_tiny_pwrbtn_y fragmentAlexandru Avadanii2021-06-222-0/+6
| | | | | | | | This disables ACPI_BUTTON and instead enables ACPI_TINY_POWER_BUTTON. It will be leveraged by both host and guest kernels to replace acpid. Change-Id: I4f564c0473b30d8f8df675aee571bc31f59a3d2d Signed-off-by: Alexandru Avadanii <Alexandru.Avadanii@enea.com>
* devcoredump: disable coredump by defaultAdrian Calianu2021-06-151-2/+1
| | | | | | | | | but let drivers enable it For example ATH10K selects WANT_DEV_COREDUMP. Change-Id: I61acf92a513ccfa9f6b37d00660da52cb676e718 Signed-off-by: Adrian Calianu <adrian.calianu@enea.com>
* update configs to 5.10 kernelAdrian Calianu2021-05-2512-19/+12
| | | | | | | | - configs become obsolete and have been removed from kernel Change-Id: I793daf45d978702f162b72950f19862a4141c899 Signed-off-by: Adrian Calianu <adrian.calianu@enea.com>
* igb: allow to build IGB as moduleAdrian Calianu2021-05-257-1/+30
| | | | | Change-Id: I232b2262db4b2fb3478a3ca15088d1c78d157069 Signed-off-by: Adrian Calianu <adrian.calianu@enea.com>
* reduced_kernel_footprint_guest: update to 5.10Adrian Calianu2021-05-251-6/+0
| | | | | | | | - remove configs which are used as dependencies by other configs/features. For example i2c is required by igb driver. Change-Id: Iaa50fb019877b0155f98d721bafdd9ecc028538e Signed-off-by: Adrian Calianu <adrian.calianu@enea.com>
* patches: update guest boot optimizationsAdrian Calianu2021-05-2112-42/+486
| | | | | | | | update patches according to updates done in ClearLinux[1] [1] https://github.com/clearlinux-pkgs/linux-kvm/tree/5.9.16-505 Change-Id: I4938aa57c52838036524b311f840b75d04be21f2 Signed-off-by: Adrian Calianu <adrian.calianu@enea.com>
* fix MMC related config check warningAdrian Calianu2021-05-142-0/+6
| | | | | | | | | | | | 'CONFIG_MMC_USHC' last val (y) and .config val (m) do not match Since we have set CONFIG_USB as module and upstream config CONFIG_MMC_USHC as builtin - we need to force the last one to be built as module Change-Id: I884432274155b3549bf085f16503a928e6d1c0cf Signed-off-by: Adrian Calianu <adrian.calianu@enea.com>
* resolv kernel config check warningsAdrian Calianu2021-05-145-26/+21
| | | | | | | | | | | | | | | | | | | | - removed trailing whitespaces - 'CONFIG_RAID6_FORCE_INT' last val (y) and .config val (n) do not match - remove it, use AVX2 - 'CONFIG_E1000E_HWTS' last val (m) and .config val (y) do not match - must be builtin - 'CONFIG_ATH_COMMON' last val (n) and .config val (m) do not match - most be added explicitly - update features/nfs/nfs_n.cfg to 5.10 kernel to fix follwoing info: [INFO]: the following symbols were not found in the active configuration: - CONFIG_NFSD_FAULT_INJECTION - CONFIG_CIFS_STATS - CONFIG_CIFS_ACL - CONFIG_CIFS_SMB2 - CONFIG_NCP_FS Change-Id: Icc21ae92125b997af9d819b22bc41e5edb1f4a81 Signed-off-by: Adrian Calianu <adrian.calianu@enea.com>
* fix kernel check warning related to consoleAdrian Calianu2021-05-141-1/+5
| | | | | | | | 'CONFIG_DUMMY_CONSOLE' last val (n) and .config val (y) do not match - dummy console is no longer optional since Change-Id: I34f5fb1db595eb9800e7a34f202c934023660319 Signed-off-by: Adrian Calianu <adrian.calianu@enea.com>
* patches: updated according to 5.10 kernelAdrian Calianu2021-05-1424-2477/+9
| | | | | | | | | | | | | | | | | | | cve - remove all patches already part of 5.10 kernel - Enea NFV Access kernel already updated to the latest available 5.10.32 from Intel repo security - patch removed since is part of 5.10 kernel ipv4 - updated the patch to 5.10 kernel kernel_startend_msg - removed because are not used anymore to measure boot time - boot time is measured with "systemd-analyze time" Change-Id: I42d217e2ff3ab9979c0d82b1ee3651f77a4ca41d Signed-off-by: Adrian Calianu <adrian.calianu@enea.com>
* features/nfs/nfs_n: fix build issueAdrian Calianu2021-05-141-1/+0
| | | | | | | | | | kernel build warning: "[INFO]: Fragments with badly formatted configuration options: - fragment configs/v5.10/standard/features/nfs/nfs_n.cfg has the following issues: #CONFIG_NFS_DEF_FILE_IO_SIZE=4096" Change-Id: Id763daca97d02a288f8d4a05abdf0b1614a544a4 Signed-off-by: Adrian Calianu <adrian.calianu@enea.com>
* patches/drivers/mailbox: removedAdrian Calianu2021-05-142-241/+0
| | | | | | | Patch is part of 5.10 - included from 4.18 Change-Id: I392c882fff928733330f2a09805e118c2d97d781 Signed-off-by: Adrian Calianu <adrian.calianu@enea.com>
* update kernel configs to 5.10 Linux kernel versionAdrian Calianu2021-05-1439-106/+83
| | | | | | | | | | | | Current changes followed few issues: - configs removed starting with 4.14(rocko kernel) - configs renamed starting with 4.14 - new configs - not touched - should be covered my main configuration - in case a subconfig is required kernel build it will select it utomatically Change-Id: I13360ebe556630ccd23aee3b82557ac4a2cdf359 Signed-off-by: Adrian Calianu <adrian.calianu@enea.com>
* debug: update to cover more debug featuresAdrian Calianu2021-05-142-2/+12
| | | | | | | | | | Make sure final config file does not contain debug features because it will increase the kernel size. New configs were induces by upstream changes like default machine(intel-corei7-64-standard). Change-Id: I9f8915f5829322b2caedcc8b174b41580ae30f50 Signed-off-by: Adrian Calianu <adrian.calianu@enea.com>
* openvswitch: update to 5.10 kernelAdrian Calianu2021-05-144-4/+12
| | | | | | | | | Enable CMA(Contiguous Memory Allocator) required by OVS to work with hugepages. Update other configs to 5.10 kernel Change-Id: Ib6dbaf1fd02bf09a4899d7f750acdb92df0a50d1 Signed-off-by: Adrian Calianu <adrian.calianu@enea.com>
* bsp/atom-c3000: update configs to Linux 5.10Adrian Calianu2021-05-141-3/+11
| | | | | | | | | | | | | Atom-C3000 is a base for all NFV Access machines. Update bsp configuration according to 5.10 source code. Some of the configs become obsolete while new confs have been replaced or added. Other configs are used to enable only Intel/AMD processors and removed obscure ones. Change-Id: I840854d77bd314af637d79900cea8a61750a4fb5 Signed-off-by: Adrian Calianu <adrian.calianu@enea.com>
* reduced_kernel_footprint: update to 5.10Adrian Calianu2021-05-145-0/+22
| | | | | | | | | - removed NFS since is not requirement on NFV Access - move other features as modules since are not required at boot time like hwmon, leds... Change-Id: I25b378575ad101367d771be356a205fde11a1530 Signed-off-by: Adrian Calianu <adrian.calianu@enea.com>
* boot_time_opt: update patches to 5.10 kernelAdrian Calianu2021-05-1237-1666/+547
| | | | | | | | | | | | | Patches used in boot time optimization are coming from clearlinux distribution. Update patches correspuding to 5.10 kernel: https://github.com/clearlinux-pkgs/linux/tree/5.10.32-1034 We selected a list of patches from ClearLinux. Those we have considered risky, unknown impact on functionality have been avoided. Change-Id: If01459292a5a383b49944645bd8536d9a62d9de3 Signed-off-by: Adrian Calianu <adrian.calianu@enea.com>
* Adding nct6775 driverintel-4.14Catalin Iova2021-02-192-0/+5
| | | | | Change-Id: I31d83e6c287477250ef25a85354ff78c793bf5bd Signed-off-by: Catalin Iova <Catalin.Iova@enea.com>
* Don't build ixgbe and ixgbevf in kernelDragos Ciprian Nedelcu2021-02-184-0/+14
| | | | | Change-Id: I76bee72dd85e62aecda919b97b9991d354036105 Signed-off-by: Dragos Ciprian Nedelcu <Dragos.Ciprian.Nedelcu@enea.com>
* features/wlan: Add ath10k AP config fragmentsAlexandru Avadanii2021-01-184-0/+16
| | | | | | | | | | 2 configuration fragments are necessary for full functionality of ath10k in AP mode: - Atheros dynamic user regulatory hints support; - ATH10k Dynamic Frequency Selection support; Change-Id: I0ff4de6e93b2fa5908e8ef47860d734480920791 Signed-off-by: Alexandru Avadanii <Alexandru.Avadanii@enea.com>
* Revert "patches: drivers: net: ath EEPROM reg domain"Alexandru Avadanii2021-01-172-54/+0
| | | | | | | | | | | The backported patch: - does not actually resolve the initial issue (testing was false-positive); - is not actually needed as the firmware image we carry in NFVA already contains the fix; - might cause issues with other chipsets; This reverts commit 24fb81762ed1aeee57064deaeedee03f5d57da06. Change-Id: I9c438d871d2aaa8c109aebe310b109eb95224baa
* patches: drivers: net: ath EEPROM reg domainAlexandru Avadanii2021-01-152-0/+54
| | | | | | | | | | | QCA6174 EEPROM might contain broken regulatory domain information, which leads to `iw reg set <country code>` not being honoured. Instead, when trying to create a wireless access point, the world (0x00) regulatory domain is used, not allowing any emissions in 5GHz bands, hence breaking 802.11a support. Change-Id: I1c65ee6b3f077116d73e777dad1ff5a3aff52a6d Signed-off-by: Alexandru Avadanii <Alexandru.Avadanii@enea.com>
* patches: drivers: mailbox: Backport ACPI PCCT fixAlexandru Avadanii2020-11-092-0/+241
| | | | | | | | | | Fix the following kernel error during boot-up (backport): [ 0.068293] Error parsing PCC subspaces from PCCT [1] https://github.com/torvalds/linux/commit/8f8027c5 Change-Id: I2e169067ba4e1a3dcdfc9e7e32612465ed00f421 Signed-off-by: Alexandru Avadanii <Alexandru.Avadanii@enea.com>
* cfg: features/ipmi: Add IPMI SSIF fragmentAlexandru Avadanii2020-10-202-0/+2
| | | | | | | | Upstream has an ipmi.scc that enables (most of) IPMI support, but lacks IPMI_SSIF. Add a separate fragment for it. Change-Id: I1ea1d43520bc46dd271615fc5719da6d5531a269 Signed-off-by: Alexandru Avadanii <Alexandru.Avadanii@enea.com>
* Mark Atheros QCA6174 to avoid bus reset.Dragos Ciprian Nedelcu2020-09-182-0/+26
| | | | | Change-Id: Id52863bf53947fd0bafb36892e299086bf0bd134 Signed-off-by: Dragos Ciprian Nedelcu <Dragos.Ciprian.Nedelcu@enea.com>
* Backport kernel fix from linux-yocto master.Dragos Ciprian Nedelcu2020-07-162-0/+70
| | | | | | | | | Fix is "KEYS: reaching the keys quotas correctly" form 2020-03-15. https://git.yoctoproject.org/cgit/cgit.cgi/linux-yocto/ commit/?id=2e356101e72ab1361821b3af024d64877d9a798d Change-Id: I34a972978bc4c9b4fef496c22bdb468a099147ea Signed-off-by: Dragos Ciprian Nedelcu <Dragos.Ciprian.Nedelcu@enea.com>
* Add x2APIC supportAdrian Calianu2019-05-132-0/+6
| | | | | | | | | It provides interrupt re-mapping support. In case x2APIC is not available xAPIC will be enabled which also support interrupt re-mapping. Change-Id: I7c61194d9b9d8cb6d82d5f978000c363824c58a3 Signed-off-by: Adrian Calianu <adrian.calianu@enea.com>
* Increase and set ramdisk size from kernel configSona Sarmadi2019-05-072-0/+6
| | | | | | | | | | | Increase ramdisk size and set it from kernel config instead of setting it as kernel boot parameter. We have big number of kernel params and at some point it will be difficult to maintain all kernel boot params. Change-Id: I3f8788e5c457e87a242a894349dd4025e4283bd2 Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
* Enable ATH10K driversGabriel Ionescu2019-04-242-0/+9
| | | | | Change-Id: Ide48a56d70c0faec8fce99fa6b170e1a84af97c7 Signed-off-by: Gabriel Ionescu <gabriel.ionescu@enea.com>
* Add basic WLAN support in the kernelGabriel Ionescu2019-04-172-0/+15
| | | | | Change-Id: I0da27ee43fa91d8ce987b63efd9c4e6494c68973 Signed-off-by: Gabriel Ionescu <gabriel.ionescu@enea.com>
* Correct comments in file referencing kernel CVE patchesAndreas Wellving2019-02-051-2/+2
| | | | | Change-Id: I8719d287ed5b8cb712dba9a061ef4e46ac8024d0 Signed-off-by: Andreas Wellving <andreas.wellving@enea.com>
* Add kernel fragment that sets a 30s reset timeout on kernel panicGabriel Ionescu2019-02-052-0/+6
| | | | | Change-Id: I273563bf7064c4cd909c6707c2530d5de2ef636f Signed-off-by: Gabriel Ionescu <gabriel.ionescu@enea.com>
* mremap: CVE-2018-18281Andreas Wellving2019-02-042-0/+181
| | | | | | | | | | | mremap: properly flush TLB before releasing the page References: https://nvd.nist.gov/vuln/detail/CVE-2018-18281 https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-4.14.y&id=541500abfe9eb30a89ff0a6eb42a21521996d68d Change-Id: I084b67b7f5a6e099ddf8de78f377e343606b92a2 Signed-off-by: Andreas Wellving <andreas.wellving@enea.com>
* sunrpc: CVE-2018-16884Andreas Wellving2019-02-042-0/+169
| | | | | | | | | | | sunrpc: use-after-free in svc_process_common() References: https://nvd.nist.gov/vuln/detail/CVE-2018-16884 https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-4.14.y&id=65dba32522065b79a16393efc75f8006c2c3dbb8 Change-Id: I440846fe5b7e8a67209bf02857ee2e7691bd4f06 Signed-off-by: Andreas Wellving <andreas.wellving@enea.com>
* USB: CVE-2018-19985Andreas Wellving2019-02-042-0/+76
| | | | | | | | | | USB: hso: Fix OOB memory access in hso_probe/hso_get_config_data References: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-4.14.y&id=49be8dc589aee04c64d61e362c5029ab20fd6fd7 Change-Id: I26c1c763c075d8719ac4bff276d8b1785ae46ad8 Signed-off-by: Andreas Wellving <andreas.wellving@enea.com>
* USB: CVE-2018-20169Andreas Wellving2019-02-042-0/+108
| | | | | | | | | | | USB: check usb_get_extra_descriptor for proper size References: https://nvd.nist.gov/vuln/detail/CVE-2018-20169 https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-4.14.y&id=7b6e85da8d94948201abb8d576d485892a6a878f Change-Id: I4676564b2b6d596406e0d3730a43e331a108f7d7 Signed-off-by: Andreas Wellving <andreas.wellving@enea.com>
* ALSA: CVE-2018-19824Andreas Wellving2019-02-042-1/+57
| | | | | | | | | | | ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c References: https://nvd.nist.gov/vuln/detail/CVE-2018-19824 https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-4.14.y&id=19f74e45746253cafb8cb1e773041e7cadbac622 Change-Id: Iee9eb9ca550408dde865a8ff08385e7c337ed763 Signed-off-by: Andreas Wellving <andreas.wellving@enea.com>
* vhost/vsock: CVE-2018-14625Andreas Wellving2019-02-042-0/+202
| | | | | | | | | | | vhost/vsock: fix use-after-free in network stack callers References: https://nvd.nist.gov/vuln/detail/CVE-2018-14625 https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-4.14.y&id=f15c072d6576c5e2b693c22e39ccc9103c952078 Change-Id: Ica09a6a909b9276f3d8ba1d0980e2e6473d461d7 Signed-off-by: Andreas Wellving <andreas.wellving@enea.com>
* userfaultfd: CVE-2018-18397Andreas Wellving2019-02-042-0/+120
| | | | | | | | | | | userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails References: https://nvd.nist.gov/vuln/detail/CVE-2018-18397 https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-4.14.y&id=82c5a8c0debac552750a00b4fc7551c89c7b34b8 Change-Id: I8b35a87096278dee376107808022c95c2350c80e Signed-off-by: Andreas Wellving <andreas.wellving@enea.com>
* KVM: CVE-2018-19407Andreas Wellving2019-02-042-0/+113
| | | | | | | | | | | KVM: X86: Fix scan ioapic use-before-initialization References: https://nvd.nist.gov/vuln/detail/CVE-2018-19407 https://lkml.org/lkml/2018/11/20/580 Change-Id: I25db67cd123956dbcf240a99f316e914c283d0e2 Signed-off-by: Andreas Wellving <andreas.wellving@enea.com>