The Linux kernel
6642cb230d
* Thu Jul 30 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-254.el10]
- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212683]
- redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169468]
- redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169468]
- redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169468]
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172539] {CVE-2026-31692}
- KVM: selftests: access_tracking_perf_test: bump number of NUMA nodes to 32 (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Rate-limit global clock updates on vCPU load (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Fix ERAPS RAP clear on INVPCID single-context invalidation (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Swap the dst and src operand for MOVNTDQA (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Ensure gmem file sizes are multiple of host page size (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Fix reserved value WRMSR testcase for multi-feature MSRs (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Use __DECLARE_FLEX_ARRAY() for UAPI structures with VLAs (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Verify SEV+ guests can read and write EFER, CR0, CR4, and CR8 (Maxim Levitsky) [RHEL-151869]
- Documentation: kvm: fix formatting of the quirks table (Maxim Levitsky) [RHEL-151869]
- KVM: x86: clarify leave_smm() return value (Maxim Levitsky) [RHEL-151869]
- selftests: kvm: add a test that VMX validates controls on RSM (Maxim Levitsky) [RHEL-151869]
- selftests: kvm: extract common functionality out of smm_test.c (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: check validity of VMCB controls when returning from SMM (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: check validity of VMCS controls when returning from SMM (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Introduce KVM_X86_QUIRK_VMCS12_ALLOW_FREEZE_IN_SMM (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Fix SRCU list traversal in kvm_fire_mask_notifiers() (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Fix a wrong MSR update in add_atomic_switch_msr() (Maxim Levitsky) [RHEL-151869]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Maxim Levitsky) [RHEL-151869]
- KVM: x86: synthesize CPUID bits only if CPU capability is set (Maxim Levitsky) [RHEL-151869]
- KVM: Remove subtle "struct kvm_stats_desc" pseudo-overlay (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Add x2APIC "features" to control EOI broadcast suppression (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Harden against unexpected adjustments to kvm_cpu_caps (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Advertise AVX10_VNNI_INT CPUID to userspace (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Advertise AVX10.2 CPUID to userspace (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Advertise AMX CPUIDs in subleaf 0x1E.0x1 to userspace (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Advertise MOVRS CPUID to userspace (Maxim Levitsky) [RHEL-151869]
- KVM: SEV: Add KVM_SEV_SNP_ENABLE_REQ_CERTS command (Maxim Levitsky) [RHEL-151869]
- KVM: Introduce KVM_EXIT_SNP_REQ_CERTS for SNP certificate-fetching (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Drop WARN on INIT/SIPI being blocked when vCPU is in Wait-For-SIPI (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Test READ=>WRITE dirty logging behavior for shadow MMU (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Print out "bad" offsets+value on VMCS config mismatch (Maxim Levitsky) [RHEL-151869]
- KVM: nVMX: Remove explicit filtering of GUEST_INTR_STATUS from shadow VMCS fields (Maxim Levitsky) [RHEL-151869]
- KVM: nVMX: Disallow access to vmcs12 fields that aren't supported by "hardware" (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Add a wrapper around ROL16() to get a vmcs12 from a field encoding (Maxim Levitsky) [RHEL-151869]
- KVM: nVMX: Setup VMX MSRs on loading CPU during nested_vmx_hardware_setup() (Maxim Levitsky) [RHEL-151869]
- KVM: guest_memfd: GUP source pages prior to populating guest memory (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: Document alignment requirements for KVM_TDX_INIT_MEM_REGION (Maxim Levitsky) [RHEL-151869]
- KVM: SEV: Document/enforce page-alignment for KVM_SEV_SNP_LAUNCH_UPDATE (Maxim Levitsky) [RHEL-151869]
- KVM: guest_memfd: Remove preparation tracking (Maxim Levitsky) [RHEL-151869]
- KVM: guest_memfd: Remove partial hugepage handling from kvm_gmem_populate() (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Add a selftests for nested VMLOAD/VMSAVE (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Stop toggling virtual VMSAVE/VMLOAD on intercept recalc (Maxim Levitsky) [RHEL-151869]
- KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Don't register posted interrupt wakeup handler if alloc_kvm_area() fails (Maxim Levitsky) [RHEL-151869]
- KVM: nSVM: Drop redundant/wrong comment in nested_vmcb02_prepare_save() (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Slightly simplify memstress_setup_nested() (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Remove declaration of nested_mark_vmcs12_pages_dirty() (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Assert that Hyper-V's HV_SVM_EXITCODE_ENL == SVM_EXIT_SW (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Harden exit_code against being used in Spectre-like attacks (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Limit incorrect check on SVM_EXIT_ERR to running as a VM (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Treat exit_code as an unsigned 64-bit value through all of KVM (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Filter out 64-bit exit codes when invoking exit handlers on bare metal (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Check for an unexpected VM-Exit after RETPOLINE "fast" handling (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Open code handling of unexpected exits in svm_invoke_exit_handler() (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Add a helper to detect VMRUN failures (Maxim Levitsky) [RHEL-151869]
- KVM: x86: align the code with kvm_x86_call() (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Tag sev_supported_vmsa_features as read-only after init (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Drop the module param to control SEV-ES DebugSwap (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Update APICv ISR (a.k.a. SVI) as part of kvm_apic_update_apicv() (Maxim Levitsky) [RHEL-151869]
- KVM: nVMX: Switch to vmcs01 to set virtual APICv mode on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
- KVM: nVMX: Switch to vmcs01 to update APIC page on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
- KVM: nVMX: Switch to vmcs01 to refresh APICv controls on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
- KVM: nVMX: Switch to vmcs01 to update SVI on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
- KVM: nVMX: Switch to vmcs01 to update TPR threshold on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
- KVM: nVMX: Switch to vmcs01 to update PML controls on-demand if L2 is active (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Add a test to verify APICv updates (while L2 is active) (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Fix a missing kunmap_local() in sev_gmem_post_populate() (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Hide KVM_IRQCHIP_KERNEL behind CONFIG_KVM_IOAPIC=y (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Bury ioapic.h definitions behind CONFIG_KVM_IOAPIC (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Fold "struct dest_map" into "struct rtc_status" (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Add a wrapper to handle common case of IRQ delivery without dest_map (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Drop MAX_NR_RESERVED_IOAPIC_PINS, use KVM_MAX_IRQ_ROUTES directly (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Drop guest-triggerable ASSERT()s on I/O APIC access alignment (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Drop ASSERT() on I/O APIC EOIs being only for LEVEL_to WARN_ON_ONCE (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Drop guest/user-triggerable asserts on IRR/ISR vectors (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Drop ASSERT()s on APIC/vCPU being non-NULL (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Extend vmx_set_nested_state_test to cover SVM (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Use TEST_ASSERT_EQ() in test_vmx_nested_state() (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Allow KVM_SET_NESTED_STATE to clear GIF when SVME==0 (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Don't set GIF when clearing EFER.SVME (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Virtualize and advertise support for ERAPS (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Don't allow L1 intercepts for instructions not advertised (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Add support for expedited writes to the fast MMIO bus (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Rename "fault_address" to "gpa" in npf_interception() (Maxim Levitsky) [RHEL-151869]
- KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Don't read guest CR3 when doing async pf while the MMU is direct (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Rename vm_get_page_table_entry() to vm_get_pte() (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Extend memstress to run on nested SVM (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Extend vmx_dirty_log_test to cover SVM (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Set the user bit on nested NPT PTEs (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Add support for nested NPTs (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Allow kvm_cpu_has_ept() to be called on AMD CPUs (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Move TDP mapping functions outside of vmx.c (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Reuse virt mapping functions for nested EPTs (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Add a stage-2 MMU instance to kvm_vm (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Stop passing VMX metadata to TDP mapping functions (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Use a TDP MMU to share EPT page tables between vCPUs (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Move PTE bitmasks to kvm_mmu (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Add a "struct kvm_mmu_arch arch" member to kvm_mmu (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Plumb "struct kvm_mmu" into x86's MMU APIs (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Add "struct kvm_mmu" to track a given MMU instance (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Stop setting A/D bits when creating EPT PTEs (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Kill eptPageTablePointer (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Rename nested TDP mapping functions (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Stop passing a memslot to nested_map_memslot() (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Make __vm_get_page_table_entry() static (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Fix sign extension bug in get_desc64_base() (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR (Maxim Levitsky) [RHEL-151869]
- KVM: nVMX: Mark APIC access page dirty when syncing vmcs12 pages (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Move nested_mark_vmcs12_pages_dirty() to vmx.c, and rename (Maxim Levitsky) [RHEL-151869]
- KVM: nVMX: Precisely mark vAPIC and PID maps dirty when delivering nested PI (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Mark vmcs12 pages as dirty if and only if they're mapped (Maxim Levitsky) [RHEL-151869]
- KVM: Use vCPU specific memslots in __kvm_vcpu_map() (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Add mediated PMU support for CPUs without "save perf global ctrl" (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Initialize vmcs01.VM_EXIT_MSR_STORE_ADDR with list address (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Dedup code for adding MSR to VMCS's auto list (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Compartmentalize adding MSRs to host vs. guest auto-load list (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Set MSR index auto-load entry if and only if entry is "new" (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Bug the VM if either MSR auto-load list is full (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Drop unused @entry_only param from add_atomic_switch_msr() (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Dedup code for removing MSR from VMCS's auto-load list (Maxim Levitsky) [RHEL-151869]
- KVM: nVMX: Don't update msr_autostore count when saving TSC for vmcs12 (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Drop intermediate "guest" field from msr_autostore (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Elide WRMSRs when loading guest PMCs if values already match (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Expose enable_mediated_pmu parameter to user space (Maxim Levitsky) [RHEL-151869]
- KVM: nSVM: Disable PMU MSR interception as appropriate while running L2 (Maxim Levitsky) [RHEL-151869]
- KVM: nVMX: Disable PMU MSR interception as appropriate while running L2 (Maxim Levitsky) [RHEL-151869]
- KVM: nVMX: Add macros to simplify nested MSR interception setting (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Handle emulated instruction for mediated vPMU (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Disallow emulation in the fastpath if mediated PMCs are active (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Load/put mediated PMU context when entering/exiting guest (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Always stuff GuestOnly=1,HostOnly=0 for mediated PMCs on AMD (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Reprogram mediated PMU event selectors on event filter updates (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Introduce eventsel_hw to prepare for pmu event filtering (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Bypass perf checks when emulating mediated PMU counter accesses (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Disable interception of select PMU MSRs for mediated vPMUs (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Load/save GLOBAL_CTRL via entry/exit fields for mediated PMU (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Disable RDPMC interception for compatible mediated vPMU (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Register PMI handler for mediated vPMU (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Implement AMD mediated PMU requirements (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Implement Intel mediated PMU requirements and constraints (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Start stubbing in mediated PMU support (Maxim Levitsky) [RHEL-151869]
- KVM: Add a simplified wrapper for registering perf callbacks (Maxim Levitsky) [RHEL-151869]
- perf: Use EXPORT_SYMBOL_FOR_KVM() for the mediated APIs (Maxim Levitsky) [RHEL-151869]
- perf: Clean up mediated vPMU accounting (Maxim Levitsky) [RHEL-151869]
- perf/x86/amd: Support PERF_PMU_CAP_MEDIATED_VPMU for AMD host (Maxim Levitsky) [RHEL-151869]
- perf/x86/intel: Support PERF_PMU_CAP_MEDIATED_VPMU (Maxim Levitsky) [RHEL-151869]
- perf/x86/core: Plumb mediated PMU capability from x86_pmu to x86_pmu_cap (Maxim Levitsky) [RHEL-151869]
- perf/x86/core: Do not set bit width for unavailable counters (Maxim Levitsky) [RHEL-151869]
- perf/x86/core: Add APIs to switch to/from mediated PMI vector (for KVM) (Maxim Levitsky) [RHEL-151869]
- perf/x86/core: Register a new vector for handling mediated guest PMIs (Maxim Levitsky) [RHEL-151869]
- perf: Add APIs to load/put guest mediated PMU context (Maxim Levitsky) [RHEL-151869]
- perf: Add a EVENT_GUEST flag (Maxim Levitsky) [RHEL-151869]
- perf: Clean up perf ctx time (Maxim Levitsky) [RHEL-151869]
- perf: Add APIs to create/release mediated guest vPMUs (Maxim Levitsky) [RHEL-151869]
- perf: Move security_perf_event_free() call to __free_event() (Maxim Levitsky) [RHEL-151869]
- perf: Add generic exclude_guest support (Maxim Levitsky) [RHEL-151869]
- perf: Skip pmu_ctx based on event_type (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Always reflect SGX EPCM #PFs back into the guest (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Test TPR / CR8 sync and interrupt masking (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Disallow setting CPUID and/or feature MSRs if L2 is active (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Explicitly configure supported XSS from {svm,vmx}_set_cpu_caps() (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Assert that non-MSI doesn't have bypass vCPU when deleting producer (Maxim Levitsky) [RHEL-151869]
- KVM: Don't clobber irqfd routing type when deassigning irqfd (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Check vCPU ID against max x2AVIC ID if and only if x2AVIC is enabled (Maxim Levitsky) [RHEL-151869]
- KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Update SVI during runtime APICv activation (Maxim Levitsky) [RHEL-151869]
- KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) (Maxim Levitsky) [RHEL-151869]
- KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits (Maxim Levitsky) [RHEL-151869]
- KVM: Harden and prepare for modifying existing guest_memfd memslots (Maxim Levitsky) [RHEL-151869]
- KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Add a CPUID testcase for KVM_SET_CPUID2 with runtime updates (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Make sure vm->vpages_mapped is always up-to-date (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Stop using __virt_pg_map() directly in tests (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Add a VMX test for LA57 nested state (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Change VM_MODE_PXXV48_4K to VM_MODE_PXXVYY_4K (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Use a loop to walk guest page tables (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Use a loop to create guest page tables (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Remove the unused argument to prepare_eptp() (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Stop hardcoding PAGE_SIZE in x86 selftests (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Extend vmx_tsc_adjust_test to cover SVM (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Extend nested_invalid_cr3_test to cover SVM (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Move nested invalid CR3 check to its own test (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Extend vmx_nested_tsc_scaling_test to cover SVM (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Extend vmx_close_while_nested_test to cover SVM (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Remove unused declaration kvm_mmu_may_ignore_guest_pat() (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Enable support for emulating AVX MOV instructions (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Add emulator support for decoding VEX prefixes (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Refactor REX prefix handling in instruction emulation (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Add AVX support to the emulator's register fetch and writeback (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Add x86_emulate_ops.get_xcr() callback (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Share emulator's common register decoding code (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Move op_prefix to struct x86_emulate_ctxt (from x86_decode_insn()) (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Improve formatting of the emulator's flags table (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Move Src2Shift up one bit (use bits 36:32 for Src2 in the emulator) (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Add support for emulating MOVNTDQA (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Add a helper to dedup loading guest/host XCR0 and XSS (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Load guest/host PKRU outside of the fastpath run loop (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Load guest/host XCR0 and XSS outside of the fastpath run loop (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Handle #MCs on VM-Enter/TD-Enter outside of the fastpath (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Handle #MCs in guest outside of fastpath (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Unify L1TF flushing under per-CPU variable (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Disable L1TF L1 data cache flush if CONFIG_CPU_MITIGATIONS=n (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Bundle all L1 data cache flush mitigation code together (Maxim Levitsky) [RHEL-151869]
- x86/bugs: KVM: Move VM_CLEAR_CPU_BUFFERS into SVM as SVM_CLEAR_CPU_BUFFERS (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Handle MMIO Stale Data in VM-Enter assembly via ALTERNATIVES_2 (Maxim Levitsky) [RHEL-151869]
- x86/bugs: Use an x86 feature to track the MMIO Stale Data mitigation (Maxim Levitsky) [RHEL-151869]
- x86/bugs: Decouple ALTERNATIVE usage from VERW macro definition (Maxim Levitsky) [RHEL-151869]
- x86/bugs: Use VM_CLEAR_CPU_BUFFERS in VMX as well (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Use on-stack copy of @flags in __vmx_vcpu_run() (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Allocate/free user_return_msrs at kvm.ko (un)loading time (Maxim Levitsky) [RHEL-151869]
- KVM: x86: remove comment about ntp correction sync for (Maxim Levitsky) [RHEL-151869]
- Revert "x86: kvm: rate-limit global clock updates" (Maxim Levitsky) [RHEL-151869]
- Revert "x86: kvm: introduce periodic global clock updates" (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Grab lapic_timer in a local variable to cleanup periodic code (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() (Maxim Levitsky) [RHEL-151869]
- KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Use "checked" versions of get_user() and put_user() (Maxim Levitsky) [RHEL-151869]
- KVM: SEV: Add known supported SEV-SNP policy bits (Maxim Levitsky) [RHEL-151869]
- KVM: SEV: Publish supported SEV-SNP policy bits (Maxim Levitsky) [RHEL-151869]
- crypto: ccp - Add an API to return the supported SEV-SNP policy bits (Maxim Levitsky) [RHEL-151869]
- KVM: SEV: Consolidate the SEV policy bits in a single header file (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Document a virtualization gap for GIF on AMD CPUs (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced (Maxim Levitsky) [RHEL-151869]
- x86/bugs: Drop unnecessary export of "x86_spec_ctrl_base" (Maxim Levitsky) [RHEL-151869]
- x86/mtrr: Drop unnecessary export of "mtrr_state" (Maxim Levitsky) [RHEL-151869]
- x86/mm: Drop unnecessary export of "ptdump_walk_pgd_level_debugfs" (Maxim Levitsky) [RHEL-151869]
- x86: Restrict KVM-induced symbol exports to KVM modules where obvious/possible (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Make loaded_vmcs_clear() static in vmx.c (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Don't disable IRQs when unregistering user-return notifier (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Leave user-return notifier registered on reboot/shutdown (Maxim Levitsky) [RHEL-151869]
- KVM: x86: WARN if user-return MSR notifier is registered on exit (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: Explicitly set user-return MSRs that *may* be clobbered by the TDX-Module (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Ensure SPEC_CTRL[63:32] is context switched between guest and host (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Ensure guest's SPEC_CTRL[63:32] is loaded on VM-Enter (Maxim Levitsky) [RHEL-151869]
- KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE (Maxim Levitsky) [RHEL-151869]
- KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation (Maxim Levitsky) [RHEL-151869]
- KVM: nSVM: Remove redundant cases in nested_svm_intercept() (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: Use struct_size to simplify tdx_get_capabilities() (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: Check size of user's kvm_tdx_capabilities array before allocating (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: Fix sparse warnings from using 0 for NULL (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: Remove __user annotation from kernel pointer (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: Take MMU lock around tdh_vp_init() (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: Fix list_add corruption during vcpu_load() (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: Bug the VM if extending the initial measurement fails (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: Guard VM state transitions with "all" the locks (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: Don't copy "cmd" back to userspace for KVM_TDX_CAPABILITIES (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: Use guard() to acquire kvm->lock in tdx_vm_ioctl() (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: Convert INIT_MEM_REGION and INIT_VCPU to "unlocked" vCPU ioctl (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: Add tdx_get_cmd() helper to get and validate sub-ioctl command (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: Add macro to retry SEAMCALLs when forcing vCPUs out of guest (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: Assert that mmu_lock is held for write when removing S-EPT entries (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: Derive error argument names from the local variable names (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: Combine KVM_BUG_ON + pr_tdx_error() into TDX_BUG_ON() (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: Fold tdx_sept_zap_private_spte() into tdx_sept_remove_private_spte() (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: ADD pages to the TD image while populating mirror EPT entries (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: Fold tdx_mem_page_record_premap_cnt() into its sole caller (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: Use atomic64_dec_return() instead of a poor equivalent (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: Avoid a double-KVM_BUG_ON() in tdx_sept_zap_private_spte() (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: WARN if mirror SPTE doesn't have full RWX when creating S-EPT mapping (Maxim Levitsky) [RHEL-151869]
- KVM: x86/mmu: Drop the return code from kvm_x86_ops.remove_external_spte() (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: Fold tdx_sept_drop_private_spte() into tdx_sept_remove_private_spte() (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: Return -EIO, not -EINVAL, on a KVM_BUG_ON() condition (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: Drop superfluous page pinning in S-EPT management (Maxim Levitsky) [RHEL-151869]
- KVM: x86/mmu: Rename kvm_tdp_map_page() to kvm_tdp_page_prefault() (Maxim Levitsky) [RHEL-151869]
- Revert "KVM: x86/tdp_mmu: Add a helper function to walk down the TDP MMU" (Maxim Levitsky) [RHEL-151869]
- KVM: x86/mmu: WARN if KVM attempts to map into an invalid TDP MMU root (Maxim Levitsky) [RHEL-151869]
- KVM: x86/mmu: Add dedicated API to map guest_memfd pfn into TDP MMU (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: Drop PROVE_MMU=y sanity check on to-be-populated mappings (Maxim Levitsky) [RHEL-151869]
- KVM: Rename kvm_arch_vcpu_async_ioctl() to kvm_arch_vcpu_unlocked_ioctl() (Maxim Levitsky) [RHEL-151869]
- KVM: Make support for kvm_arch_vcpu_async_ioctl() mandatory (Maxim Levitsky) [RHEL-151869]
- KVM: x86/mmu: Move the misplaced export of kvm_zap_gfn_range() (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Add a helper to dedup reporting of unhandled VM-Exits (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Rename "guest_paddr" variables to "gpa" (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Use "gpa" and "gva" for local variable names in pre-fault test (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Forcefully override ARCH from x86_64 to x86 (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Don't fall over in mmu_stress_test when only one CPU is present (Maxim Levitsky) [RHEL-151869]
- KVM: guest_memfd: Define a CLASS to get+put guest_memfd file from a memslot (Maxim Levitsky) [RHEL-151869]
- KVM: guest_memfd: Add gmem_inode.flags field instead of using i_private (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Add guest_memfd tests for mmap and NUMA policy support (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Add helpers to probe for NUMA support, and multi-node systems (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Use proper uAPI headers to pick up mempolicy.h definitions (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Add additional equivalents to libnuma APIs in KVM's numaif.h (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Report stacktraces SIGBUS, SIGSEGV, SIGILL, and SIGFPE by default (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Define wrappers for common syscalls to assert success (Maxim Levitsky) [RHEL-151869]
- KVM: guest_memfd: Enforce NUMA mempolicy using shared policy (Maxim Levitsky) [RHEL-151869]
- KVM: guest_memfd: Add slab-allocated inode cache (Maxim Levitsky) [RHEL-151869]
- KVM: guest_memfd: Use guest mem inodes instead of anonymous inodes (Maxim Levitsky) [RHEL-151869]
- KVM: guest_memfd: Add macro to iterate over gmem_files for a mapping/inode (Maxim Levitsky) [RHEL-151869]
- KVM: guest_memfd: Rename "struct kvm_gmem" to "struct gmem_file" (Maxim Levitsky) [RHEL-151869]
- KVM: guest_memfd: Drop a superfluous local var in kvm_gmem_fault_user_mapping() (Maxim Levitsky) [RHEL-151869]
- KVM: guest_memfd: use folio_nr_pages() instead of shift operation (Maxim Levitsky) [RHEL-151869]
- KVM: guest_memfd: remove redundant gmem variable initialization (Maxim Levitsky) [RHEL-151869]
- KVM: guest_memfd: move kvm_gmem_get_index() and use in kvm_gmem_prepare_folio() (Maxim Levitsky) [RHEL-151869]
- mm/mempolicy: Export memory policy symbols (Maxim Levitsky) [RHEL-151869]
- mm/filemap: Extend __filemap_get_folio() to support NUMA memory policies (Maxim Levitsky) [RHEL-151869]
- mm/filemap: Add NUMA mempolicy support to filemap_alloc_folio() (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Add AVIC support for 4k vCPUs in x2AVIC mode (Maxim Levitsky) [RHEL-151869]
- x86/cpufeatures: Add X86_FEATURE_X2AVIC_EXT (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Move AVIC Physical ID table allocation to vcpu_precreate() (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Expand AVIC_PHYSICAL_MAX_INDEX_MASK to be a 12-bit field (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Replace hard-coded value 0x1FF with the corresponding macro (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Add a helper to look up the max physical ID for AVIC (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (Maxim Levitsky) [RHEL-151869]
- KVM: nVMX: Add an off-by-default module param to WARN on missed consistency checks (Maxim Levitsky) [RHEL-151869]
- KVM: nVMX: Remove support for "early" consistency checks via hardware (Maxim Levitsky) [RHEL-151869]
- KVM: nVMX: Stuff vmcs02.TSC_MULTIPLIER early on for nested early checks (Maxim Levitsky) [RHEL-151869]
- KVM: nVMX: Add consistency check for TSC_MULTIPLIER=0 (Maxim Levitsky) [RHEL-151869]
- KVM: nVMX: Add consistency check for TPR_THRESHOLD[31:4]!=0 without VID (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Use kvm_mmu_page role to construct EPTP, not current vCPU state (Maxim Levitsky) [RHEL-151869]
- KVM: x86/mmu: Move "dummy root" helpers to spte.h (Maxim Levitsky) [RHEL-151869]
- KVM: nVMX: Hardcode dummy EPTP used for early nested consistency checks (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Hoist construct_eptp() "up" in vmx.c (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Disallow EFER.LMSLE when not supported by hardware (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Advertise EferLmsleUnsupported to userspace (Maxim Levitsky) [RHEL-151869]
- KVM: Fix VM exit code for full dirty ring in API documentation (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN (Maxim Levitsky) [RHEL-151869]
- KVM: TDX: Replace kmalloc + copy_from_user with memdup_user in tdx_td_init() (Maxim Levitsky) [RHEL-151869]
- KVM: Explicitly allocate/setup irqfd cleanup as per-CPU workqueue (Maxim Levitsky) [RHEL-151869]
- KVM: nVMX: Use vcpu instead of vmx->vcpu when vcpu is available (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Remove stale vmx_set_dr6() declaration (Maxim Levitsky) [RHEL-151869]
- KVM: x86/mmu: Skip MMIO SPTE invalidation if enable_mmio_caching=0 (Maxim Levitsky) [RHEL-151869]
- x86/cpufeatures: Make X86_FEATURE leaf 17 Linux-specific (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Fix redundant updates of LBR MSR intercepts (Maxim Levitsky) [RHEL-151869]
- tools headers UAPI: Sync KVM's vmx.h with the kernel to pick SEAMCALL exit reason (Maxim Levitsky) [RHEL-151869]
- KVM: nSVM: Fix and simplify LBR virtualization handling with nested (Maxim Levitsky) [RHEL-151869]
- KVM: nSVM: Always recalculate LBR MSR intercepts in svm_update_lbrv() (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Fix check for valid GVA on an EPT violation (Maxim Levitsky) [RHEL-151869]
- KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: switch to raw spinlock for svm->ir_list_lock (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Make avic_ga_log_notifier() local to avic.c (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Unregister KVM's GALog notifier on kvm-amd.ko exit (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Initialize per-CPU svm_data at the end of hardware setup (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Call out MSR_IA32_S_CET is not handled by XSAVES (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Harden KVM against imbalanced load/put of guest FPU state (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Unload "FPU" state on INIT if and only if its currently in-use (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Inject #UD if guest tries to execute SEAMCALL or TDCALL (Maxim Levitsky) [RHEL-151869]
- tools headers UAPI: Sync KVM's vmx.h header with the kernel sources to handle new exit reasons (Maxim Levitsky) [RHEL-151869]
- tools headers UAPI: Sync x86's asm/kvm.h with the kernel sources (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Don't try to get perf capabilities for hybrid CPUs (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Test prefault memory during concurrent memslot removal (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Export KVM-internal symbols for sub-modules only (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Drop pointless exports of kvm_arch_xxx() hooks (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Move kvm_intr_is_single_vcpu() to lapic.c (Maxim Levitsky) [RHEL-151869]
- KVM: Export KVM-internal symbols for sub-modules only (Maxim Levitsky) [RHEL-151869]
- KVM: s390/vfio-ap: Use kvm_is_gpa_in_memslot() instead of open coded equivalent (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Make CR4.CET a guest owned bit (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Verify MSRs are (not) in save/restore list when (un)supported (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Add coverage for KVM-defined registers in MSRs test (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Add KVM_{G,S}ET_ONE_REG coverage to MSRs test (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Extend MSRs test to validate vCPUs without supported features (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Add support for MSR_IA32_{S,U}_CET to MSRs test (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Add an MSR test to exercise guest/host and read/write (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Enable shadow stack virtualization for SVM (Maxim Levitsky) [RHEL-151869]
- KVM: SEV: Synchronize MSR_IA32_XSS from the GHCB when it's valid (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Pass through shadow stack MSRs as appropriate (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Update dump_vmcb with shadow stack save area additions (Maxim Levitsky) [RHEL-151869]
- KVM: nSVM: Save/load CET Shadow Stack state to/from vmcb12/vmcb02 (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Emulate reads and writes to shadow stack MSRs (Maxim Levitsky) [RHEL-151869]
- KVM: nVMX: Advertise new VM-Entry/Exit control bits for CET state (Maxim Levitsky) [RHEL-151869]
- KVM: nVMX: Add consistency checks for CET states (Maxim Levitsky) [RHEL-151869]
- KVM: nVMX: Add consistency checks for CR0.WP and CR4.CET (Maxim Levitsky) [RHEL-151869]
- KVM: nVMX: Prepare for enabling CET support for nested guest (Maxim Levitsky) [RHEL-151869]
- KVM: nVMX: Virtualize NO_HW_ERROR_CODE_CC for L1 event injection to L2 (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Configure nested capabilities after CPU capabilities (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Enable CET virtualization for VMX and advertise to userspace (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Disable support for IBT and SHSTK if allow_smaller_maxphyaddr is true (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Initialize allow_smaller_maxphyaddr earlier in setup (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Disable support for Shadow Stacks if TDP is disabled (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Add XSS support for CET_KERNEL and CET_USER (Maxim Levitsky) [RHEL-151869]
- KVM: nVMX: Always forward XSAVES/XRSTORS exits from L2 to L1 (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Allow setting CR4.CET if IBT or SHSTK is supported (Maxim Levitsky) [RHEL-151869]
- KVM: x86/mmu: Pretty print PK, SS, and SGX flags in MMU tracepoints (Maxim Levitsky) [RHEL-151869]
- KVM: x86/mmu: WARN on attempt to check permissions for Shadow Stack #PF (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Emulate SSP[63:32]!=0 #GP(0) for FAR JMP to 32-bit mode (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Don't emulate task switches when IBT or SHSTK is enabled (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Don't emulate instructions affected by CET features (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Set host constant supervisor states to VMCS fields (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Set up interception for CET MSRs (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Save and reload SSP to/from SMRAM (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Emulate read and write to CET MSRs (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Enable guest SSP read/write interface with new uAPIs (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Introduce CET VMCS fields and control bits (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Report KVM supported CET MSRs as to-be-saved (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Add fault checks for guest CR4.CET setting (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Load guest FPU state when access XSAVE-managed MSRs (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Initialize kvm_caps.supported_xss (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Refresh CPUID on write to guest MSR_IA32_XSS (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Check XSS validity against guest CPUIDs (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Report XSS as to-be-saved if there are supported features (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Introduce KVM_{G,S}ET_ONE_REG uAPIs support (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Move global "avic" variable to avic.c (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Don't advise the user to do force_avic=y (when x2AVIC is detected) (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Always print "AVIC enabled" separately, even when force enabled (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Update "APICv in x2APIC without x2AVIC" in avic.c, not svm.c (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Make svm_x86_ops globally visible, clean up on-HyperV usage (Maxim Levitsky) [RHEL-151869]
- KVM: SEV: Validate XCR0 provided by guest in GHCB (Maxim Levitsky) [RHEL-151869]
- KVM: SEV: Read save fields from GHCB exactly once (Maxim Levitsky) [RHEL-151869]
- KVM: SEV: Rename kvm_ghcb_get_sw_exit_code() to kvm_get_cached_sw_exit_code() (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Restrict GLOBAL_{CTRL,STATUS}, fixed PMCs, and PEBS to PMU v2+ (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Move initialization of valid PMCs bitmask to common x86 (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Use BIT_ULL() instead of open coded equivalents (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Add helpers to toggle/change a bit in VMCS execution controls (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Use KVM_REQ_RECALC_INTERCEPTS to react to CPUID updates (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Rework KVM_REQ_MSR_FILTER_CHANGED into a generic RECALC_INTERCEPTS (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Move PMU_CAP_{FW_WRITES,LBR_FMT} into msr-index.h header (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Rename vmx_vmentry/vmexit_ctrl() helpers (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Snapshot host (i.e. perf's) reported PMU capabilities (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Check pmu->version, not enable_pmu, when getting PMC MSRs (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Setup canonical VMCS config prior to kvm_x86_vendor_init() (Maxim Levitsky) [RHEL-151869]
- KVM: SEV: Add SEV-SNP CipherTextHiding support (Maxim Levitsky) [RHEL-151869]
- KVM: SEV: Introduce new min,max sev_es and sev_snp asid variables (Maxim Levitsky) [RHEL-151869]
- KVM: nSVM: Replace kzalloc() + copy_from_user() with memdup_user() (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Add support for DIV and IDIV in the fastops test (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Dedup the gnarly constraints of the fastops tests (more macros!) (Maxim Levitsky) [RHEL-151869]
- KVM: selftests: Add coverage for 'b' (byte) sized fastops emulation (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Enable Secure TSC for SNP guests (Maxim Levitsky) [RHEL-151869]
- KVM: SEV: Fold sev_es_vcpu_reset() into sev_vcpu_create() (Maxim Levitsky) [RHEL-151869]
- KVM: SEV: Set RESET GHCB MSR value during sev_es_init_vmcb() (Maxim Levitsky) [RHEL-151869]
- KVM: SEV: Move init of SNP guest state into sev_init_vmcb() (Maxim Levitsky) [RHEL-151869]
- KVM: SVM: Move SEV-ES VMSA allocation to a dedicated sev_vcpu_create() helper (Maxim Levitsky) [RHEL-151869]
- x86/cpufeatures: Add SNP Secure TSC (Maxim Levitsky) [RHEL-151869]
- KVM: SEV: Enforce minimum GHCB version requirement for SEV-SNP guests (Maxim Levitsky) [RHEL-151869]
- KVM: SEV: Drop GHCB_VERSION_DEFAULT and open code it (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Zero XSTATE components on INIT by iterating over supported features (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Manually clear MPX state only on INIT (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Add kvm_msr_{read,write}() helpers (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Use double-underscore read/write MSR helpers as appropriate (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Rename kvm_{g,s}et_msr()* to show that they emulate guest accesses (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Advertise support for the immediate form of MSR instructions (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Support the immediate form of WRMSRNS in the VM-Exit fastpath (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Add support for RDMSR/WRMSRNS w/ immediate on Intel (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Rename handle_fastpath_set_msr_irqoff() to handle_fastpath_wrmsr() (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Rename local "ecx" variables to "msr" and "pmc" as appropriate (Maxim Levitsky) [RHEL-151869]
- x86/cpufeatures: Add a CPU feature bit for MSR immediate form instructions (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Add a fastpath handler for INVD (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Push acquisition of SRCU in fastpath into kvm_pmu_trigger_event() (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Rename check_pmu_event_filter() to pmc_is_event_allowed() (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Drop redundant check on PMC being locally enabled for emulation (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Drop redundant check on PMC being globally enabled for emulation (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Open code pmc_event_is_allowed() in its callers (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Rename pmc_speculative_in_use() to pmc_is_locally_enabled() (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Calculate set of to-be-emulated PMCs at time of WRMSRs (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Add wrappers for counting emulated instructions/branches (Maxim Levitsky) [RHEL-151869]
- KVM: x86/pmu: Move kvm_init_pmu_capability() to pmu.c (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Fold WRMSR fastpath helpers into the main handler (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Unconditionally grab data from EDX:EAX in WRMSR fastpath (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Acquire SRCU in WRMSR fastpath iff instruction needs to be skipped (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Unconditionally handle MSR_IA32_TSC_DEADLINE in fastpath exits (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Drop semi-arbitrary restrictions on IPI type in fastpath (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Only allow "fast" IPIs in fastpath WRMSR(X2APIC_ICR) handler (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Add kvm_icr_to_lapic_irq() helper to allow for fastpath IPIs (Maxim Levitsky) [RHEL-151869]
- KVM: VMX: Add host MSR read/write helpers to consolidate preemption handling (Maxim Levitsky) [RHEL-151869]
- KVM: x86/mmu: Recover TDP MMU NX huge pages using MMU read lock (Maxim Levitsky) [RHEL-151869]
- KVM: x86/mmu: Rename kvm_tdp_mmu_zap_sp() to better indicate its purpose (Maxim Levitsky) [RHEL-151869]
- KVM: x86/mmu: Track possible NX huge pages separately for TDP vs. Shadow MMU (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Remove fastops (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Convert em_salc() to C (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Introduce EM_ASM_3WCL (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Introduce EM_ASM_1SRC2 (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Introduce EM_ASM_2CL (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Introduce EM_ASM_2W (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Introduce EM_ASM_2R (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Introduce EM_ASM_2 (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Introduce EM_ASM_1 (Maxim Levitsky) [RHEL-151869]
- KVM: x86: Implement test_cc() in C (Maxim Levitsky) [RHEL-151869]
- module: Rename EXPORT_SYMBOL_GPL_FOR_MODULES to EXPORT_SYMBOL_FOR_MODULES (Maxim Levitsky) [RHEL-151869]
- net: aquantia: Remove redundant UDP length adjustment with GSO_PARTIAL (CKI Backport Bot) [RHEL-156516]
- net/mlx5e: Remove redundant UDP length adjustment with GSO_PARTIAL (CKI Backport Bot) [RHEL-156516]
- udp: gso: Use single MSS length in UDP header for GSO_PARTIAL (CKI Backport Bot) [RHEL-156516]
Resolves: RHEL-151869, RHEL-156516, RHEL-169468, RHEL-172539, RHEL-212683
Signed-off-by: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com>
|
||
|---|---|---|
| .gitignore | ||
| check-kabi | ||
| def_variants.yaml.rhel | ||
| dracut-virt.conf | ||
| fedoraimaca.x509 | ||
| filtermods.py | ||
| flavors | ||
| gating.yaml | ||
| generate_all_configs.sh | ||
| kernel-aarch64-64k-debug-rhel.config | ||
| kernel-aarch64-64k-rhel.config | ||
| kernel-aarch64-debug-rhel.config | ||
| kernel-aarch64-rhel.config | ||
| kernel-aarch64-rt-64k-debug-rhel.config | ||
| kernel-aarch64-rt-64k-rhel.config | ||
| kernel-aarch64-rt-debug-rhel.config | ||
| kernel-aarch64-rt-rhel.config | ||
| kernel-local | ||
| kernel-ppc64le-debug-rhel.config | ||
| kernel-ppc64le-rhel.config | ||
| kernel-riscv64-debug-rhel.config | ||
| kernel-riscv64-rhel.config | ||
| kernel-s390x-debug-rhel.config | ||
| kernel-s390x-rhel.config | ||
| kernel-s390x-zfcpdump-rhel.config | ||
| kernel-x86_64-debug-rhel.config | ||
| kernel-x86_64-rhel.config | ||
| kernel-x86_64-rt-debug-rhel.config | ||
| kernel-x86_64-rt-rhel.config | ||
| kernel.changelog | ||
| kernel.sbat.template | ||
| kernel.spec | ||
| kmap.py | ||
| kvm_stat.logrotate | ||
| linux-kernel-test.patch | ||
| Makefile.rhelver | ||
| merge.py | ||
| mod-denylist.sh | ||
| mod-sign.sh | ||
| Module.kabi_aarch64 | ||
| Module.kabi_dup_aarch64 | ||
| Module.kabi_dup_ppc64le | ||
| Module.kabi_dup_riscv64 | ||
| Module.kabi_dup_s390x | ||
| Module.kabi_dup_x86_64 | ||
| Module.kabi_ppc64le | ||
| Module.kabi_riscv64 | ||
| Module.kabi_s390x | ||
| Module.kabi_x86_64 | ||
| nvidiabfdpu.x509 | ||
| nvidiagpuoot001.x509 | ||
| nvidiajetsonsoc.x509 | ||
| partial-clang_lto-aarch64-debug-snip.config | ||
| partial-clang_lto-aarch64-snip.config | ||
| partial-clang_lto-x86_64-debug-snip.config | ||
| partial-clang_lto-x86_64-snip.config | ||
| partial-clang-debug-snip.config | ||
| partial-clang-snip.config | ||
| partial-kgcov-debug-snip.config | ||
| partial-kgcov-snip.config | ||
| patch-6.12-redhat.patch | ||
| process_configs.sh | ||
| README.rst | ||
| redhatsecureboot501.cer | ||
| redhatsecureboot504.cer | ||
| redhatsecurebootca5.cer | ||
| rheldup3.x509 | ||
| rhelima_centos.x509 | ||
| rhelima.x509 | ||
| rhelimaca1.x509 | ||
| rhelkpatch1.x509 | ||
| rpminspect.yaml | ||
| sources | ||
| uki_addons.json | ||
| uki_create_addons.py | ||
| uki-addons.sbat.template | ||
| uki.sbat.template | ||
| x509.genkey.centos | ||
| x509.genkey.rhel | ||
=================== The Kernel dist-git =================== The kernel is maintained in a `source tree`_ rather than directly in dist-git. The specfile is maintained as a `template`_ in the source tree along with a set of build scripts to generate configurations, (S)RPMs, and to populate the dist-git repository. The `documentation`_ for the source tree covers how to contribute and maintain the tree. If you're looking for the downstream patch set it's available in the source tree with "git log master..ark-patches" or `online`_. Each release in dist-git is tagged in the source repository so you can easily check out the source tree for a build. The tags are in the format name-version-release, but note release doesn't contain the dist tag since the source can be built in different build roots (Fedora, CentOS, etc.) .. _source tree: https://gitlab.com/cki-project/kernel-ark.git .. _template: https://gitlab.com/cki-project/kernel-ark/-/blob/os-build/redhat/kernel.spec.template .. _documentation: https://gitlab.com/cki-project/kernel-ark/-/wikis/home .. _online: https://gitlab.com/cki-project/kernel-ark/-/commits/ark-patches