KumiSystems/openwrtv3
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

kernel: add missing ARM64_SSBD symbol

Browse source 
In 4.14.57, a new symbol for Spectre v4 mitigation was introduced for
ARM64. Add this symbol to all ARM64 targets using kernel 4.14.

This mitigates CVE-2018-3639 on ARM64.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
This commit is contained in:
Stijn Tintel 2018-07-31 12:19:18 +03:00
parent fecbd91c7c
commit 77e3e706ce
6 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
target/linux/armvirt/64/config-default
View file

@ -42,6 +42,7 @@ CONFIG_ARM64_PAN=y
# CONFIG_ARM64_PTDUMP is not set # CONFIG_ARM64_PTDUMP is not set
# CONFIG_ARM64_PTDUMP_DEBUGFS is not set # CONFIG_ARM64_PTDUMP_DEBUGFS is not set
# CONFIG_ARM64_RANDOMIZE_TEXT_OFFSET is not set # CONFIG_ARM64_RANDOMIZE_TEXT_OFFSET is not set
CONFIG_ARM64_SSBD=y
# CONFIG_ARM64_SW_TTBR0_PAN is not set # CONFIG_ARM64_SW_TTBR0_PAN is not set
CONFIG_ARM64_UAO=y CONFIG_ARM64_UAO=y
CONFIG_ARM64_VA_BITS=39 CONFIG_ARM64_VA_BITS=39

1
target/linux/mediatek/mt7622/config-4.14
View file

@ -52,6 +52,7 @@ CONFIG_ARM64_PAN=y
# CONFIG_ARM64_PTDUMP_CORE is not set # CONFIG_ARM64_PTDUMP_CORE is not set
# CONFIG_ARM64_PTDUMP_DEBUGFS is not set # CONFIG_ARM64_PTDUMP_DEBUGFS is not set
# CONFIG_ARM64_RANDOMIZE_TEXT_OFFSET is not set # CONFIG_ARM64_RANDOMIZE_TEXT_OFFSET is not set
CONFIG_ARM64_SSBD=y
# CONFIG_ARM64_SW_TTBR0_PAN is not set # CONFIG_ARM64_SW_TTBR0_PAN is not set
CONFIG_ARM64_UAO=y CONFIG_ARM64_UAO=y
CONFIG_ARM64_VA_BITS=39 CONFIG_ARM64_VA_BITS=39

1
target/linux/mvebu/cortexa53/config-default
View file

@ -36,6 +36,7 @@ CONFIG_ARM64_PAGE_SHIFT=12
# CONFIG_ARM64_PTDUMP_CORE is not set # CONFIG_ARM64_PTDUMP_CORE is not set
# CONFIG_ARM64_PTDUMP_DEBUGFS is not set # CONFIG_ARM64_PTDUMP_DEBUGFS is not set
# CONFIG_ARM64_RANDOMIZE_TEXT_OFFSET is not set # CONFIG_ARM64_RANDOMIZE_TEXT_OFFSET is not set
CONFIG_ARM64_SSBD=y
# CONFIG_ARM64_SW_TTBR0_PAN is not set # CONFIG_ARM64_SW_TTBR0_PAN is not set
# CONFIG_ARM64_UAO is not set # CONFIG_ARM64_UAO is not set
CONFIG_ARM64_VA_BITS=39 CONFIG_ARM64_VA_BITS=39

1
target/linux/mvebu/cortexa72/config-default
View file

@ -36,6 +36,7 @@ CONFIG_ARM64_PAGE_SHIFT=12
# CONFIG_ARM64_PTDUMP_CORE is not set # CONFIG_ARM64_PTDUMP_CORE is not set
# CONFIG_ARM64_PTDUMP_DEBUGFS is not set # CONFIG_ARM64_PTDUMP_DEBUGFS is not set
# CONFIG_ARM64_RANDOMIZE_TEXT_OFFSET is not set # CONFIG_ARM64_RANDOMIZE_TEXT_OFFSET is not set
CONFIG_ARM64_SSBD=y
# CONFIG_ARM64_SW_TTBR0_PAN is not set # CONFIG_ARM64_SW_TTBR0_PAN is not set
# CONFIG_ARM64_UAO is not set # CONFIG_ARM64_UAO is not set
CONFIG_ARM64_VA_BITS=39 CONFIG_ARM64_VA_BITS=39

1
target/linux/octeontx/config-4.14
View file

@ -54,6 +54,7 @@ CONFIG_ARM64_PAN=y
# CONFIG_ARM64_PTDUMP_CORE is not set # CONFIG_ARM64_PTDUMP_CORE is not set
# CONFIG_ARM64_PTDUMP_DEBUGFS is not set # CONFIG_ARM64_PTDUMP_DEBUGFS is not set
# CONFIG_ARM64_RANDOMIZE_TEXT_OFFSET is not set # CONFIG_ARM64_RANDOMIZE_TEXT_OFFSET is not set
CONFIG_ARM64_SSBD=y
# CONFIG_ARM64_SW_TTBR0_PAN is not set # CONFIG_ARM64_SW_TTBR0_PAN is not set
CONFIG_ARM64_UAO=y CONFIG_ARM64_UAO=y
CONFIG_ARM64_VA_BITS=48 CONFIG_ARM64_VA_BITS=48

1
target/linux/sunxi/cortexa53/config-default
View file

@ -35,6 +35,7 @@ CONFIG_ARM64_PAGE_SHIFT=12
# CONFIG_ARM64_PTDUMP_CORE is not set # CONFIG_ARM64_PTDUMP_CORE is not set
# CONFIG_ARM64_PTDUMP_DEBUGFS is not set # CONFIG_ARM64_PTDUMP_DEBUGFS is not set
# CONFIG_ARM64_RANDOMIZE_TEXT_OFFSET is not set # CONFIG_ARM64_RANDOMIZE_TEXT_OFFSET is not set
CONFIG_ARM64_SSBD=y
# CONFIG_ARM64_SW_TTBR0_PAN is not set # CONFIG_ARM64_SW_TTBR0_PAN is not set
# CONFIG_ARM64_UAO is not set # CONFIG_ARM64_UAO is not set
CONFIG_ARM64_VA_BITS=39 CONFIG_ARM64_VA_BITS=39