Ubuntu
linux package

~apw/ubuntu/+source/linux/+git/pti:master

  1. Git
  2. lp:~apw/ubuntu/+source/linux/+git/pti
  3. master
Last commit made on 2018-01-25
Get this branch:
git clone -b master https://git.launchpad.net/~apw/ubuntu/+source/linux/+git/pti
Only Andy Whitcroft can upload to this branch. If you are Andy Whitcroft please log in for upload directions.

Branch merges

Branch information

Name:
master
Repository:
lp:~apw/ubuntu/+source/linux/+git/pti

Recent commits

b32038e... by Stefan Bader

UBUNTU: Ubuntu-4.13.0-32.35

Signed-off-by: Stefan Bader <email address hidden>

57ed6ed... by Jay Vosburgh

UBUNTU: SAUCE: x86/entry: Fix up retpoline assembler labels

The extant assembler labels in entry_SYSCALL_64_fastpath
result in the error path incorrectly entering the retpoline logic.
This results in that logic jumping to whatever address is in %r10,
which is the fourth system call argument.

This enables a trivial means to instruct the kernel to jump
to any arbitrary address. Non-malicious executables making invalid
system calls may also cause the system to crash.

Resolve this by renumbering the assembler labels as is found
in other kernels.

CVE-2017-5753
CVE-2017-5715

Fixes: d2e0236 ("x86/entry: Use retpoline for syscall's indirect calls")
Signed-off-by: Jay Vosburgh <email address hidden>
Signed-off-by: Stefan Bader <email address hidden>

337397e... by Stefan Bader

UBUNTU: Start new release

Ignore: yes
Signed-off-by: Stefan Bader <email address hidden>

e263127... by Marcelo Cerri

UBUNTU: Ubuntu-4.13.0-31.34

Signed-off-by: Marcelo Henrique Cerri <email address hidden>

38d629b... by Marcelo Cerri

UBUNTU: [Config] KERNEL_NOBP=y

CVE-2017-5753
CVE-2017-5715

Acked-by: Khalid Elmously <email address hidden>
Acked-by: Stefan Bader <email address hidden>
Signed-off-by: Marcelo Henrique Cerri <email address hidden>

adcf3c8... by Marcelo Cerri

UBUNTU: SAUCE: s390: print messages for gmb and nobp

CVE-2017-5753
CVE-2017-5715

Acked-by: Khalid Elmously <email address hidden>
Acked-by: Stefan Bader <email address hidden>
Signed-off-by: Marcelo Henrique Cerri <email address hidden>

9e34b46... by Martin Schwidefsky <email address hidden>

UBUNTU: SAUCE: s390: improve cpu alternative handling for gmb and nobp

CVE-2017-5753
CVE-2017-5715

Signed-off-by: Martin Schwidefsky <email address hidden>
Acked-by: Khalid Elmously <email address hidden>
Acked-by: Stefan Bader <email address hidden>
Signed-off-by: Marcelo Henrique Cerri <email address hidden>

e49a387... by Stefan Bader

UBUNTU: Start new release

Ignore: yes
Signed-off-by: Stefan Bader <email address hidden>

27650b7... by Marcelo Cerri

UBUNTU: Ubuntu-4.13.0-30.33

Signed-off-by: Marcelo Henrique Cerri <email address hidden>

2d616f1... by Andy Whitcroft

UBUNTU: [Packaging] git-ubuntu-log -- handle multiple bugs/cves better

BugLink: http://bugs.launchpad.net/bugs/1743383

Signed-off-by: Andy Whitcroft <email address hidden>
Signed-off-by: Marcelo Henrique Cerri <email address hidden>