[linux] branch wheezy-security updated (161c3b2 -> 3590e69)

[debian-kernel at lists.debian.org]

This is an automated email from the git hooks/post-receive script.

benh pushed a change to branch wheezy-security
in repository linux.

      from  161c3b2   [!x86] Adjust "mmap: Add an exception ... for Hotspot JVM ..." to fix FTBFS
       new  3590e69   [amd64] Implement Kernel Page Table Isolation (KPTI, aka KAISER) (CVE-2017-5754)

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


Summary of changes:
 debian/changelog                                   |    7 +
 ...dd-nokaiser-boot-option-using-alternative.patch |  610 +++++++
 ...iser-alloc_ldt_struct-use-get_zeroed_page.patch |   28 +
 ...sm-tlbflush.h-handle-nopge-at-lower-level.patch |   79 +
 .../all/kpti/kaiser-disabled-on-xen-pv.patch       |   48 +
 ...er_flush_tlb_on_return_to_user-check-pcid.patch |   83 +
 .../all/kpti/kaiser-kernel-address-isolation.patch | 1909 ++++++++++++++++++++
 ...ternative-instead-of-x86_cr3_pcid_noflush.patch |  108 ++
 .../kpti/kaiser-user_map-__kprobes_text-too.patch  |   26 +
 .../kpti/kpti-rename-to-page_table_isolation.patch |  275 +++
 .../bugfix/all/kpti/kpti-report-when-enabled.patch |   44 +
 ...t-sched-core-fix-mmu_context.h-assumption.patch |   37 +
 ...h_mm_irqs_off-and-use-it-in-the-scheduler.patch |   73 +
 ...ask_exit-shouldn-t-use-switch_mm_irqs_off.patch |   41 +
 .../x86-alternatives-add-instruction-padding.patch |  348 ++++
 .../x86-alternatives-cleanup-dprintk-macro.patch   |  108 ++
 .../x86-alternatives-make-jmps-more-robust.patch   |  257 +++
 ...ternatives-use-optimized-nops-for-padding.patch |   50 +
 ...mdline-parsing-for-options-with-arguments.patch |  174 ++
 ...-carve-out-early-cmdline-parsing-function.patch |  131 ++
 ...command-line-parsing-when-matching-at-end.patch |  119 ++
 ...nd-line-parsing-when-partial-word-matches.patch |  100 +
 ...oot-pass-in-size-to-early-cmdline-parsing.patch |   59 +
 ...-boot-simplify-early-command-line-parsing.patch |   51 +
 ...-features-from-intel-document-319433-012a.patch |   30 +
 .../x86-kaiser-check-boottime-cmdline-params.patch |  118 ++
 .../x86-kaiser-move-feature-detection-up.patch     |   77 +
 .../all/kpti/x86-kaiser-reenable-paravirt.patch    |   25 +
 ...-and-simplify-x86_feature_kaiser-handling.patch |   94 +
 ...-64-fix-reboot-interaction-with-cr4.pcide.patch |   41 +
 ...noinvpcid-boot-option-to-turn-off-invpcid.patch |   72 +
 .../all/kpti/x86-mm-add-invpcid-helpers.patch      |   91 +
 ...d-the-nopcid-boot-option-to-turn-off-pcid.patch |   72 +
 ...86-mm-build-arch-x86-mm-tlb.c-even-on-smp.patch |   63 +
 .../x86-mm-disable-pcid-on-32-bit-kernels.patch    |   63 +
 ...-mm-enable-cr4.pcide-on-supported-systems.patch |  135 ++
 .../kpti/x86-mm-fix-invpcid-asm-constraint.patch   |   66 +
 ...available-use-it-to-flush-global-mappings.patch |   54 +
 .../kpti/x86-mm-kaiser-re-enable-vsyscalls.patch   |  132 ++
 ...h.h-code-always-use-the-formerly-smp-code.patch |  232 +++
 ...-mm-sched-core-turn-off-irqs-in-switch_mm.patch |   64 +
 .../x86-mm-sched-core-uninline-switch_mm.patch     |  190 ++
 .../x86-paravirt-dont-patch-flush_tlb_single.patch |   65 +
 ...-x86-vdso-Use-seqcount-instead-of-seqlock.patch |   20 +-
 ...osix-timers-thread-posix-cpu-timers-on-rt.patch |   30 +-
 debian/patches/series                              |   42 +
 46 files changed, 6508 insertions(+), 33 deletions(-)
 create mode 100644 debian/patches/bugfix/all/kpti/kaiser-add-nokaiser-boot-option-using-alternative.patch
 create mode 100644 debian/patches/bugfix/all/kpti/kaiser-alloc_ldt_struct-use-get_zeroed_page.patch
 create mode 100644 debian/patches/bugfix/all/kpti/kaiser-asm-tlbflush.h-handle-nopge-at-lower-level.patch
 create mode 100644 debian/patches/bugfix/all/kpti/kaiser-disabled-on-xen-pv.patch
 create mode 100644 debian/patches/bugfix/all/kpti/kaiser-kaiser_flush_tlb_on_return_to_user-check-pcid.patch
 create mode 100644 debian/patches/bugfix/all/kpti/kaiser-kernel-address-isolation.patch
 create mode 100644 debian/patches/bugfix/all/kpti/kaiser-use-alternative-instead-of-x86_cr3_pcid_noflush.patch
 create mode 100644 debian/patches/bugfix/all/kpti/kaiser-user_map-__kprobes_text-too.patch
 create mode 100644 debian/patches/bugfix/all/kpti/kpti-rename-to-page_table_isolation.patch
 create mode 100644 debian/patches/bugfix/all/kpti/kpti-report-when-enabled.patch
 create mode 100644 debian/patches/bugfix/all/kpti/mm-mmu_context-sched-core-fix-mmu_context.h-assumption.patch
 create mode 100644 debian/patches/bugfix/all/kpti/sched-core-add-switch_mm_irqs_off-and-use-it-in-the-scheduler.patch
 create mode 100644 debian/patches/bugfix/all/kpti/sched-core-idle_task_exit-shouldn-t-use-switch_mm_irqs_off.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-alternatives-add-instruction-padding.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-alternatives-cleanup-dprintk-macro.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-alternatives-make-jmps-more-robust.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-alternatives-use-optimized-nops-for-padding.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-boot-add-early-cmdline-parsing-for-options-with-arguments.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-boot-carve-out-early-cmdline-parsing-function.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-boot-fix-early-command-line-parsing-when-matching-at-end.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-boot-fix-early-command-line-parsing-when-partial-word-matches.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-boot-pass-in-size-to-early-cmdline-parsing.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-boot-simplify-early-command-line-parsing.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-cpufeature-add-cpu-features-from-intel-document-319433-012a.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-kaiser-check-boottime-cmdline-params.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-kaiser-move-feature-detection-up.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-kaiser-reenable-paravirt.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-kaiser-rename-and-simplify-x86_feature_kaiser-handling.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-mm-64-fix-reboot-interaction-with-cr4.pcide.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-mm-add-a-noinvpcid-boot-option-to-turn-off-invpcid.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-mm-add-invpcid-helpers.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-mm-add-the-nopcid-boot-option-to-turn-off-pcid.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-mm-build-arch-x86-mm-tlb.c-even-on-smp.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-mm-disable-pcid-on-32-bit-kernels.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-mm-enable-cr4.pcide-on-supported-systems.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-mm-fix-invpcid-asm-constraint.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-mm-if-invpcid-is-available-use-it-to-flush-global-mappings.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-mm-kaiser-re-enable-vsyscalls.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-mm-remove-the-up-asm-tlbflush.h-code-always-use-the-formerly-smp-code.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-mm-sched-core-turn-off-irqs-in-switch_mm.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-mm-sched-core-uninline-switch_mm.patch
 create mode 100644 debian/patches/bugfix/all/kpti/x86-paravirt-dont-patch-flush_tlb_single.patch

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/kernel/linux.git