Changes in its_indirect_alignment.py

f088104d837a991c65e51fa30bb4196169b3244d - Merge drm/drm-next into drm-intel-gt-next

Tue, 16 Sep 2025 12:53:20 +0200

Merge drm/drm-next into drm-intel-gt-nextBackmerge in order to get the commit: 048832a3f400 ("drm/i915: Refactor shmem_pwrite() to use kiocb and write_iter")To drm-intel-gt-next as there are followup fixes to be applied.Signed-off-by: Joonas Lahtinen List of files: /linux/tools/testing/selftests/x86/bugs/its_indirect_alignment.py

ab93e0dd72c37d378dd936f031ffb83ff2bd87ce - Merge branch 'next' into for-linus

Wed, 06 Aug 2025 19:08:54 +0200

Merge branch 'next' into for-linusPrepare input updates for 6.17 merge window. List of files: /linux/tools/testing/selftests/x86/bugs/its_indirect_alignment.py

a7bee4e7f78089c101be2ad51f4b5ec64782053e - Merge tag 'ib-mfd-gpio-input-pwm-v6.17' of git://git.kernel.org/pub/scm/linux/kernel/git/lee/mfd into next

Mon, 04 Aug 2025 08:28:48 +0200

Merge tag 'ib-mfd-gpio-input-pwm-v6.17' of git://git.kernel.org/pub/scm/linux/kernel/git/lee/mfd into nextMerge an immutable branch between MFD, GPIO, Input and PWM to resolveconflicts for the merge window pull request. List of files: /linux/tools/testing/selftests/x86/bugs/its_indirect_alignment.py

74f1af95820fc2ee580a775a3a17c416db30b38c - Merge remote-tracking branch 'drm/drm-next' into msm-next

Sun, 29 Jun 2025 04:54:49 +0200

Merge remote-tracking branch 'drm/drm-next' into msm-nextBack-merge drm-next to (indirectly) get arm-smmu updates for makingstall-on-fault more reliable.Signed-off-by: Rob Clark List of files: /linux/tools/testing/selftests/x86/bugs/its_indirect_alignment.py

c598d5eb9fb331ba17bc9ad67ae9a2231ca5aca5 - Merge drm/drm-next into drm-misc-next

Wed, 11 Jun 2025 09:01:34 +0200

Merge drm/drm-next into drm-misc-nextBackmerging to forward to v6.16-rc1Signed-off-by: Thomas Zimmermann List of files: /linux/tools/testing/selftests/x86/bugs/its_indirect_alignment.py

86e2d052c2320bf12571a5d96b16c2745e1cfc5e - Merge drm/drm-next into drm-xe-next

Mon, 09 Jun 2025 18:26:55 +0200

Merge drm/drm-next into drm-xe-nextBackmerging to bring in 6.16Signed-off-by: Thomas Hellström List of files: /linux/tools/testing/selftests/x86/bugs/its_indirect_alignment.py

34c55367af96f62e89221444f04487440ebc6487 - Merge drm/drm-next into drm-intel-next

Mon, 09 Jun 2025 11:40:46 +0200

Merge drm/drm-next into drm-intel-nextSync to v6.16-rc1, among other things to get the fixed size GENMASK_U*()and BIT_U*() macros.Signed-off-by: Jani Nikula List of files: /linux/tools/testing/selftests/x86/bugs/its_indirect_alignment.py

4d4eb38795b5cbc66103ae2582bccead5bf0f736 - Merge remote-tracking branch 'torvalds/master' into perf-tools-next

Mon, 19 May 2025 16:12:36 +0200

Merge remote-tracking branch 'torvalds/master' into perf-tools-nextTo pick up changes for other tools/ libraries used by perf and forheader synchronization with the kernel sources originals.Signed-off-by: Arnaldo Carvalho de Melo List of files: /linux/tools/testing/selftests/x86/bugs/its_indirect_alignment.py

ef2233850edc4cc0d5fc6136fcdb004a1ddfa7db - Merge tag 'v6.15' into rdma.git for-next

Mon, 26 May 2025 20:32:29 +0200

Merge tag 'v6.15' into rdma.git for-nextFollowing patches need the RDMA rc branch since we are past the RC cyclenow.Merge conflicts resolved based on Linux-next:- For RXE odp changes keep for-next version and fixup new places that need to call is_odp_mr() https://lore.kernel.org/r/20250422143019.500201bd@canb.auug.org.au https://lore.kernel.org/r/20250514122455.3593b083@canb.auug.org.au- irdma is keeping the while/kfree bugfix from -rc and the pf/cdev_info change from for-next https://lore.kernel.org/r/20250513130630.280ee6c5@canb.auug.org.auSigned-off-by: Jason Gunthorpe List of files: /linux/tools/testing/selftests/x86/bugs/its_indirect_alignment.py

9c7dcf4c16ef521657450a82dc26775d6f556209 - Merge tag 'i2c-host-6.16' of git://git.kernel.org/pub/scm/linux/kernel/git/andi.shyti/linux into i2c/for-mergewindow

Fri, 23 May 2025 17:18:16 +0200

Merge tag 'i2c-host-6.16' of git://git.kernel.org/pub/scm/linux/kernel/git/andi.shyti/linux into i2c/for-mergewindowi2c-host updates for v6.16Cleanups and refactorings- Many drivers switched to dev_err_probe()- Generic cleanups applied to designware, iproc, ismt, mlxbf, npcm7xx, qcom-geni, pasemi, and thunderx- davinci: declare I2C mangling support among I2C features- designware: clean up DTS handling- designware: fix PM runtime on driver unregister- imx: improve error logging during probe- lpc2k: improve checks in probe error path- xgene-slimpro: improve PCC shared memory handling- pasemi: improve error handling in reset, smbus clear, timeouts- tegra: validate buffer length during transfers- wmt: convert binding to YAML formatImprovements and extended support:- microchip-core: add SMBus support- mlxbf: add support for repeated start in block transfers- mlxbf: improve timer configuration- npcm: attempt clock toggle recovery before failing init- octeon: add support for block mode operations- pasemi: add support for unjam device feature- riic: add support for bus recoveryNew device support:- MediaTek Dimensity 1200 (MT6893)- Sophgo SG2044- Renesas RZ/V2N (R9A09G056)- Rockchip RK3528- AMD ISP (new driver)Misc changes:- core: add support for Write Disable-aware SPD List of files: /linux/tools/testing/selftests/x86/bugs/its_indirect_alignment.py

85502b2214d50ba0ddf2a5fb454e4d28a160d175 - Merge tag 'loongarch-kvm-6.16' of git://git.kernel.org/pub/scm/linux/kernel/git/chenhuacai/linux-loongson into HEAD

Mon, 26 May 2025 22:12:13 +0200

Merge tag 'loongarch-kvm-6.16' of git://git.kernel.org/pub/scm/linux/kernel/git/chenhuacai/linux-loongson into HEADLoongArch KVM changes for v6.161. Don't flush tlb if HW PTW supported.2. Add LoongArch KVM selftests support. List of files: /linux/tools/testing/selftests/x86/bugs/its_indirect_alignment.py

bebd7b262638af611a0e699ba37c43ec2238801b - Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

Thu, 15 May 2025 20:22:32 +0200

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netCross-merge networking fixes after downstream PR (net-6.15-rc7).Conflicts:tools/testing/selftests/drivers/net/hw/ncdevmem.c 97c4e094a4b2 ("tests/ncdevmem: Fix double-free of queue array") 2f1a805f32ba ("selftests: ncdevmem: Implement devmem TCP TX")https://lore.kernel.org/20250514122900.1e77d62d@canb.auug.org.auAdjacent changes:net/core/devmem.cnet/core/devmem.h 0afc44d8cdf6 ("net: devmem: fix kernel panic when netlink socket close after module unload") bd61848900bf ("net: devmem: Implement TX path")Signed-off-by: Jakub Kicinski List of files: /linux/tools/testing/selftests/x86/bugs/its_indirect_alignment.py

547c5775a742d9c83891b629b75d1d4c8e88d8c0 - Merge tag 'asoc-v6.16' of https://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-next

Thu, 22 May 2025 20:30:34 +0200

Merge tag 'asoc-v6.16' of https://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-nextASoC: Updates for v6.16The changes in this release are quite large, mainly in drivers ratherthan the core. This is partly due to cleanups that touch a lot ofdrivers and partly due to several relatively large new drivers. - Support for automatically enumerating DAIs from standards conforming SoundWire SDCA devices, further work is required for these to be useful in an actual card. - Conversion of quite a few drivers to newer GPIO APIs. - More helpers and cleanups from Mormimoto-san. - Support for a wider range of AVS platforms. - Support for AMD ACP 7.x platforms, Cirrus Logic CS35L63 and CS48L32, Everest Semiconductor ES8389, Longsoon-1 AC'97 controllers, nVidia Tegra264, Richtek ALC203 and RT9123 and Rockchip SAI controllers. List of files: /linux/tools/testing/selftests/x86/bugs/its_indirect_alignment.py

831962e9d7b774d858cfeefc3848e06a2d5599df - Add sound card support for QCS9100 and QCS9075

Tue, 20 May 2025 11:34:09 +0200

Add sound card support for QCS9100 and QCS9075Merge series from Mohammad Rafi Shaik :This patchset adds support for sound card on Qualcomm QCS9100 andQCS9075 boards. List of files: /linux/tools/testing/selftests/x86/bugs/its_indirect_alignment.py

c4070e1996e05dd2eb5e08ee68d0d00553ae08f7 - Merge commit 'its-for-linus-20250509-merge' into x86/core, to resolve conflicts

Tue, 13 May 2025 10:47:10 +0200

Merge commit 'its-for-linus-20250509-merge' into x86/core, to resolve conflicts Conflicts: Documentation/admin-guide/hw-vuln/index.rst arch/x86/include/asm/cpufeatures.h arch/x86/kernel/alternative.c arch/x86/kernel/cpu/bugs.c arch/x86/kernel/cpu/common.c drivers/base/cpu.c include/linux/cpu.hSigned-off-by: Ingo Molnar List of files: /linux/tools/testing/selftests/x86/bugs/its_indirect_alignment.py

6f5bf947bab06f37ff931c359fd5770c4d9cbf87 - Merge tag 'its-for-linus-20250509' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

Mon, 12 May 2025 02:23:03 +0200

Merge tag 'its-for-linus-20250509' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tipPull x86 ITS mitigation from Dave Hansen: "Mitigate Indirect Target Selection (ITS) issue. I'd describe this one as a good old CPU bug where the behavior is _obviously_ wrong, but since it just results in bad predictions it wasn't wrong enough to notice. Well, the researchers noticed and also realized that thus bug undermined a bunch of existing indirect branch mitigations. Thus the unusually wide impact on this one. Details: ITS is a bug in some Intel CPUs that affects indirect branches including RETs in the first half of a cacheline. Due to ITS such branches may get wrongly predicted to a target of (direct or indirect) branch that is located in the second half of a cacheline. Researchers at VUSec found this behavior and reported to Intel. Affected processors: - Cascade Lake, Cooper Lake, Whiskey Lake V, Coffee Lake R, Comet Lake, Ice Lake, Tiger Lake and Rocket Lake. Scope of impact: - Guest/host isolation: When eIBRS is used for guest/host isolation, the indirect branches in the VMM may still be predicted with targets corresponding to direct branches in the guest. - Intra-mode using cBPF: cBPF can be used to poison the branch history to exploit ITS. Realigning the indirect branches and RETs mitigates this attack vector. - User/kernel: With eIBRS enabled user/kernel isolation is *not* impacted by ITS. - Indirect Branch Prediction Barrier (IBPB): Due to this bug indirect branches may be predicted with targets corresponding to direct branches which were executed prior to IBPB. This will be fixed in the microcode. Mitigation: As indirect branches in the first half of cacheline are affected, the mitigation is to replace those indirect branches with a call to thunk that is aligned to the second half of the cacheline. RETs that take prediction from RSB are not affected, but they may be affected by RSB-underflow condition. So, RETs in the first half of cacheline are also patched to a return thunk that executes the RET aligned to second half of cacheline"* tag 'its-for-linus-20250509' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: selftest/x86/bugs: Add selftests for ITS x86/its: FineIBT-paranoid vs ITS x86/its: Use dynamic thunks for indirect branches x86/ibt: Keep IBT disabled during alternative patching mm/execmem: Unify early execmem_cache behaviour x86/its: Align RETs in BHB clear sequence to avoid thunking x86/its: Add support for RSB stuffing mitigation x86/its: Add "vmexit" option to skip mitigation on some CPUs x86/its: Enable Indirect Target Selection mitigation x86/its: Add support for ITS-safe return thunk x86/its: Add support for ITS-safe indirect thunk x86/its: Enumerate Indirect Target Selection (ITS) bug Documentation: x86/bugs/its: Add ITS documentation List of files: /linux/tools/testing/selftests/x86/bugs/its_indirect_alignment.py

7a9b709e7cc5ce1ffb84ce07bf6d157e1de758df - selftest/x86/bugs: Add selftests for ITS

Wed, 25 Dec 2024 01:09:28 +0100

selftest/x86/bugs: Add selftests for ITSBelow are the tests added for Indirect Target Selection (ITS):- its_sysfs.py - Check if sysfs reflects the correct mitigation status for the mitigation selected via the kernel cmdline.- its_permutations.py - tests mitigation selection with cmdline permutations with other bugs like spectre_v2 and retbleed.- its_indirect_alignment.py - verifies that for addresses in .retpoline_sites section that belong to lower half of cacheline are patched to ITS-safe thunk. Typical output looks like below: Site 49: function symbol: __x64_sys_restart_syscall+0x1f <0xffffffffbb1509af> # vmlinux: 0xffffffff813509af: jmp 0xffffffff81f5a8e0 # kcore: 0xffffffffbb1509af: jmpq *%rax # ITS thunk NOT expected for site 49 # PASSED: Found *%rax # Site 50: function symbol: __resched_curr+0xb0 <0xffffffffbb181910> # vmlinux: 0xffffffff81381910: jmp 0xffffffff81f5a8e0 # kcore: 0xffffffffbb181910: jmp 0xffffffffc02000fc # ITS thunk expected for site 50 # PASSED: Found 0xffffffffc02000fc -> jmpq *%rax - its_ret_alignment.py - verifies that for addresses in .return_sites section that belong to lower half of cacheline are patched to its_return_thunk. Typical output looks like below: Site 97: function symbol: collect_event+0x48 <0xffffffffbb007f18> # vmlinux: 0xffffffff81207f18: jmp 0xffffffff81f5b500 # kcore: 0xffffffffbb007f18: jmp 0xffffffffbbd5b560 # PASSED: Found jmp 0xffffffffbbd5b560 # Site 98: function symbol: collect_event+0xa4 <0xffffffffbb007f74> # vmlinux: 0xffffffff81207f74: jmp 0xffffffff81f5b500 # kcore: 0xffffffffbb007f74: retq # PASSED: Found retqSome of these tests have dependency on tools like virtme-ng[1] and drgn[2].When the dependencies are not met, the test will be skipped.[1] https://github.com/arighi/virtme-ng[2] https://github.com/osandov/drgnCo-developed-by: Tao Zhang Signed-off-by: Tao Zhang Signed-off-by: Pawan Gupta Signed-off-by: Dave Hansen List of files: /linux/tools/testing/selftests/x86/bugs/its_indirect_alignment.py