- Kernel - mailweb.openeuler.org

[PATCH OLK-6.6 v7 00/39] High Performance Container Resource View Isolation -- Stage 2
by GONG Ruiqi 13 Aug '25

13 Aug '25

v7: - Add init for `iter` in bpf_pidns_nr_tasks() - Mark `__maybe_unused` for `pol` in blkcg_get_one_stat_v1() - Remove unused `RET_SKIP` in bpf progs code v6: - Remove bpf_mem_direct_map(). Export direct_pages_count[] and get it via bpf_x86_direct_pages(). v5: - Gather bpf_arm64_cpu_have_feature() into arch/arm64/kernel/bpf-rvi.c v4: - Fix compile failure of bpf_mem_failure() when CONFIG_MEMORY_FAILURE=n - Move iterator target for diskstats & partitions into block/bpf-rvi.c, to avoid unexpected "kABI changes" (actually no) v3: - Optimize swaptotal's estimation and make it a stand-alone function v2: - Remove pidns's refcount from the loadavg global list. - Optimize calculation of swap{total,usage,free} for swap and meminfo - Fix a put_task_struct() missing for bpf_disk_seqf_start() - Remove ineffective build control in samples/bpf/Makefile - Clean up some commented code --- Common supports: bpf-rvi: cpuset: Fix missing of return for !tsk in task_effective_cpumask() bpf-rvi: Add bpf_mem_cgroup_from_task() kfunc bpf-rvi: cgroup: Add cgroup_rstat_flush_atomic() kfunc bpf-rvi: proc: add bpf_get_{idle,iowait}_time kfunc bpf-rvi: cpuacct: Add bpf_cpuacct_kcpustat_cpu_fetch kfunc bpf-rvi: cpuacct: Add task_cpuacct() Cpuinfo_arm64: bpf-rvi: arm64: Add bpf_arm64_cpu_have_feature() kfunc bpf-rvi: arm64: Add cpuinfo_arm64 iterator target bpf-rvi: Add bpf_arch_flags kunc for arm64 samples/bpf: Add iterator program for cpuinfo_arm64 Diskstats: bpf-rvi: block: Add diskstats iterator target bpf-rvi: blk-cgroup: Add bpf_blkcg_get_dev_iostat() kfunc samples/bpf: Add iterator program for diskstats Partitions: bpf-rvi: block: Add partitions iterator target bpf-rvi: block: Look up /dev in reaper's fs->root and filter partitions samples/bpf: Add iterator program for partitions Loadavg: bpf-rvi: pidns: Calculate loadavg for each pid namespace bpf-rvi: pidns: Add for_each_task_in_pidns and loadavg-related kfuncs samples/bpf: Add iterator program for loadavg Uptime: bpf-rvi: cpuacct: Add bpf_task_ca_cpuusage() kfunc samples/bpf: Add iterator program for uptime Swaps: bpf-rvi: Add bpf_si_memswinfo() kfunc bpf-rvi: Add bpf_page_counter_read() kfunc samples/bpf: Add iterator program for swaps Stat: bpf-rvi: Add bpf_seq_file_append() kfunc bpf-rvi: Add stat-related misc kfuncs bpf-rvi: Add cpu runqueue related kfuncs bpf-rvi: Add kstat_ & kcpustat_ kfuncs bpf-rvi: stat: Add stat iterator target samples/bpf: Add iterator program for stat Meminfo: bpf-rvi: Add bpf_mem_{file_{hugepage,pmdmapped},kreclaimable} kfunc bpf-rvi: Add bpf_mem_{total,free}cma kfunc bpf-rvi: Add bpf_hugetlb_report_meminfo kfunc bpf-rvi: Add bpf_mem_failure kfunc bpf-rvi: Add bpf_mem_percpu kfunc bpf-rvi: Add bpf_mem_commit_limit & bpf_mem_committed kfunc bpf-rvi: Add bpf_mem_vmalloc_{used,total} kfunc bpf-rvi: Add bpf_x86_direct_pages kfunc samples/bpf: Add iterator program for meminfo --- GONG Ruiqi (32): bpf-rvi: cpuset: Fix missing of return for !tsk in task_effective_cpumask() bpf-rvi: Add bpf_mem_cgroup_from_task() kfunc bpf-rvi: cgroup: Add cgroup_rstat_flush_atomic() kfunc bpf-rvi: proc: add bpf_get_{idle,iowait}_time kfunc bpf-rvi: cpuacct: Add bpf_cpuacct_kcpustat_cpu_fetch kfunc bpf-rvi: cpuacct: Add task_cpuacct() bpf-rvi: arm64: Add bpf_arm64_cpu_have_feature() kfunc bpf-rvi: arm64: Add cpuinfo_arm64 iterator target bpf-rvi: arm64: Add bpf_arch_flags kunc for arm64 samples/bpf: Add iterator program for cpuinfo_arm64 bpf-rvi: block: Add diskstats iterator target bpf-rvi: blk-cgroup: Add bpf_blkcg_get_dev_iostat() kfunc samples/bpf: Add iterator program for diskstats bpf-rvi: block: Add partitions iterator target bpf-rvi: block: Look up /dev in reaper's fs->root and filter partitions samples/bpf: Add iterator program for partitions bpf-rvi: pidns: Calculate loadavg for each pid namespace bpf-rvi: pidns: Add for_each_task_in_pidns and loadavg-related kfuncs samples/bpf: Add iterator program for loadavg bpf-rvi: cpuacct: Add bpf_task_ca_cpuusage() kfunc samples/bpf: Add iterator program for uptime bpf-rvi: Add bpf_si_memswinfo() kfunc bpf-rvi: Add bpf_page_counter_read() kfunc samples/bpf: Add iterator program for swaps bpf-rvi: Add bpf_seq_file_append() kfunc bpf-rvi: Add stat-related misc kfuncs bpf-rvi: Add cpu runqueue related kfuncs bpf-rvi: Add kstat_ & kcpustat_ kfuncs bpf-rvi: stat: Add stat iterator target samples/bpf: Add iterator program for stat bpf-rvi: Add bpf_x86_direct_pages kfunc samples/bpf: Add iterator program for meminfo Gu Bowen (7): bpf-rvi: Add bpf_mem_{file_{hugepage,pmdmapped},kreclaimable} kfunc bpf-rvi: Add bpf_mem_{total,free}cma kfunc bpf-rvi: Add bpf_hugetlb_report_meminfo kfunc bpf-rvi: Add bpf_mem_failure kfunc bpf-rvi: Add bpf_mem_percpu kfunc bpf-rvi: Add bpf_mem_commit_limit & bpf_mem_committed kfunc bpf-rvi: Add bpf_mem_vmalloc_{used,total} kfunc arch/arm64/kernel/Makefile | 1 + arch/arm64/kernel/bpf-rvi.c | 223 ++++++++++++ arch/arm64/kernel/cpuinfo.c | 130 +------ arch/arm64/kernel/hwcap_str.h | 133 +++++++ arch/x86/mm/pat/set_memory.c | 7 + block/Kconfig.iosched | 3 + block/Makefile | 1 + block/blk-cgroup.c | 158 +++++++++ block/bpf-rvi.c | 442 ++++++++++++++++++++++++ block/genhd.c | 3 +- fs/proc/stat.c | 204 +++++++++++ include/linux/cgroup.h | 12 + include/linux/pid.h | 5 + include/linux/pid_namespace.h | 28 ++ kernel/bpf-rvi/Kconfig | 2 + kernel/bpf-rvi/Makefile | 2 +- kernel/bpf-rvi/common_kfuncs.c | 324 +++++++++++++++++ kernel/bpf-rvi/generic_single_iter.c | 3 + kernel/cgroup/cpuset.c | 4 +- kernel/cgroup/rstat.c | 18 + kernel/pid.c | 9 + kernel/pid_namespace.c | 130 +++++++ kernel/sched/cpuacct.c | 43 +++ samples/bpf/bpf_rvi_cpuinfo_arm64.bpf.c | 111 ++++++ samples/bpf/bpf_rvi_diskstats.bpf.c | 299 ++++++++++++++++ samples/bpf/bpf_rvi_loadavg.bpf.c | 59 ++++ samples/bpf/bpf_rvi_meminfo.bpf.c | 285 +++++++++++++++ samples/bpf/bpf_rvi_partitions.bpf.c | 42 +++ samples/bpf/bpf_rvi_stat.bpf.c | 219 ++++++++++++ samples/bpf/bpf_rvi_swaps.bpf.c | 137 ++++++++ samples/bpf/bpf_rvi_uptime.bpf.c | 121 +++++++ 31 files changed, 3026 insertions(+), 132 deletions(-) create mode 100644 arch/arm64/kernel/bpf-rvi.c create mode 100644 arch/arm64/kernel/hwcap_str.h create mode 100644 block/bpf-rvi.c create mode 100644 kernel/bpf-rvi/common_kfuncs.c create mode 100644 samples/bpf/bpf_rvi_cpuinfo_arm64.bpf.c create mode 100644 samples/bpf/bpf_rvi_diskstats.bpf.c create mode 100644 samples/bpf/bpf_rvi_loadavg.bpf.c create mode 100644 samples/bpf/bpf_rvi_meminfo.bpf.c create mode 100644 samples/bpf/bpf_rvi_partitions.bpf.c create mode 100644 samples/bpf/bpf_rvi_stat.bpf.c create mode 100644 samples/bpf/bpf_rvi_swaps.bpf.c create mode 100644 samples/bpf/bpf_rvi_uptime.bpf.c -- 2.25.1

2 40

[PATCH OLK-5.10 0/2] fix CVE-2022-49623
by Bowen You 13 Aug '25

13 Aug '25

*** BLURB HERE *** Christophe JAILLET (1): powerpc/xive: Add some error handling code to 'xive_spapr_init()' Nathan Lynch (1): powerpc/xive/spapr: correct bitmap allocation size arch/powerpc/sysdev/xive/spapr.c | 39 ++++++++++++++++++++++++-------- 1 file changed, 30 insertions(+), 9 deletions(-) -- 2.34.1

2 3

[PATCH OLK-6.6 0/1] CVE-2025-38375
by Yongqiang Liu 13 Aug '25

13 Aug '25

Bui Quang Minh (1): virtio-net: ensure the received length does not exceed allocated size drivers/net/virtio_net.c | 38 ++++++++++++++++++++++++++++++++++---- 1 file changed, 34 insertions(+), 4 deletions(-) -- 2.43.0

2 2

[PATCH OLK-6.6 0/1] CVE-2025-38211
by Yongqiang Liu 13 Aug '25

13 Aug '25

Shin'ichiro Kawasaki (1): RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction drivers/infiniband/core/iwcm.c | 29 +++++++++++++++-------------- 1 file changed, 15 insertions(+), 14 deletions(-) -- 2.43.0

2 2

[PATCH OLK-5.10 0/2] CVE-2025-38180
by Yongqiang Liu 13 Aug '25

13 Aug '25

Eric Dumazet (2): net: atm: add lec_mutex net: atm: fix /proc/net/atm/lec handling net/atm/lec.c | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) -- 2.43.0

2 3

[openeuler:OLK-6.6 2665/2665] arch/arm64/kvm/virtcca_cvm.c:992:5: warning: no previous prototype for function 'kvm_cvm_vgic_nr_lr'
by kernel test robot 13 Aug '25

13 Aug '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: aa3c277f9483def562baa4e43778762d2a8141c2 commit: befbde867291b5bb068a97b17086ad20484b6068 [2665/2665] VirtCCA: Adapt virtcca operations by cca_base. config: arm64-allmodconfig (https://download.01.org/0day-ci/archive/20250813/202508131219.yqnWOPOr-lkp@…) compiler: clang version 19.1.7 (https://github.com/llvm/llvm-project cd708029e0b2869e80abe31ddb175f7c35361f90) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20250813/202508131219.yqnWOPOr-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202508131219.yqnWOPOr-lkp@intel.com/ All warnings (new ones prefixed by >>): arch/arm64/kvm/virtcca_cvm.c:825:5: warning: no previous prototype for function 'virtcca_get_tmi_version' [-Wmissing-prototypes] 825 | u64 virtcca_get_tmi_version(void) | ^ arch/arm64/kvm/virtcca_cvm.c:825:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 825 | u64 virtcca_get_tmi_version(void) | ^ | static arch/arm64/kvm/virtcca_cvm.c:885:15: error: no member named 'data_start' in 'struct kvm_user_data' 885 | (user_data.data_start + user_data.data_size < user_data.data_start)) | ~~~~~~~~~ ^ arch/arm64/kvm/virtcca_cvm.c:885:60: error: no member named 'data_start' in 'struct kvm_user_data' 885 | (user_data.data_start + user_data.data_size < user_data.data_start)) | ~~~~~~~~~ ^ arch/arm64/kvm/virtcca_cvm.c:885:38: error: no member named 'data_size' in 'struct kvm_user_data'; did you mean 'ram_size'? 885 | (user_data.data_start + user_data.data_size < user_data.data_start)) | ^~~~~~~~~ | ram_size include/uapi/linux/kvm.h:1557:8: note: 'ram_size' declared here 1557 | __u64 ram_size; | ^ arch/arm64/kvm/virtcca_cvm.c:888:45: error: no member named 'dtb_info' in 'struct kvm_user_data' 888 | if (is_dtb_info_has_extend_data(user_data.dtb_info)) { | ~~~~~~~~~ ^ arch/arm64/kvm/virtcca_cvm.c:890:18: error: no member named 'data_start' in 'struct kvm_user_data' 890 | if (user_data.data_start + user_data.data_size > ipa_end) | ~~~~~~~~~ ^ arch/arm64/kvm/virtcca_cvm.c:890:41: error: no member named 'data_size' in 'struct kvm_user_data'; did you mean 'ram_size'? 890 | if (user_data.data_start + user_data.data_size > ipa_end) | ^~~~~~~~~ | ram_size include/uapi/linux/kvm.h:1557:8: note: 'ram_size' declared here 1557 | __u64 ram_size; | ^ arch/arm64/kvm/virtcca_cvm.c:897:18: error: no member named 'data_start' in 'struct kvm_user_data' 897 | if (user_data.data_start + user_data.data_size > user_data.loader_start) | ~~~~~~~~~ ^ arch/arm64/kvm/virtcca_cvm.c:897:41: error: no member named 'data_size' in 'struct kvm_user_data'; did you mean 'ram_size'? 897 | if (user_data.data_start + user_data.data_size > user_data.loader_start) | ^~~~~~~~~ | ram_size include/uapi/linux/kvm.h:1557:8: note: 'ram_size' declared here 1557 | __u64 ram_size; | ^ arch/arm64/kvm/virtcca_cvm.c:907:44: error: no member named 'dtb_info' in 'struct kvm_user_data' 907 | if (is_dtb_info_has_extend_data(user_data.dtb_info)) | ~~~~~~~~~ ^ arch/arm64/kvm/virtcca_cvm.c:908:28: error: no member named 'data_start' in 'struct kvm_user_data' 908 | cvm->dtb_end = user_data.data_start + user_data.data_size; | ~~~~~~~~~ ^ arch/arm64/kvm/virtcca_cvm.c:908:51: error: no member named 'data_size' in 'struct kvm_user_data'; did you mean 'ram_size'? 908 | cvm->dtb_end = user_data.data_start + user_data.data_size; | ^~~~~~~~~ | ram_size include/uapi/linux/kvm.h:1557:8: note: 'ram_size' declared here 1557 | __u64 ram_size; | ^ arch/arm64/kvm/virtcca_cvm.c:910:53: error: no member named 'dtb_info' in 'struct kvm_user_data' 910 | cvm->dtb_end = user_data.loader_start + user_data.dtb_info; | ~~~~~~~~~ ^ arch/arm64/kvm/virtcca_cvm.c:911:31: error: no member named 'data_start' in 'struct kvm_user_data' 911 | cvm->mmio_start = user_data.data_start; | ~~~~~~~~~ ^ arch/arm64/kvm/virtcca_cvm.c:912:29: error: no member named 'data_start' in 'struct kvm_user_data' 912 | cvm->mmio_end = user_data.data_start + user_data.data_size; | ~~~~~~~~~ ^ arch/arm64/kvm/virtcca_cvm.c:912:52: error: no member named 'data_size' in 'struct kvm_user_data'; did you mean 'ram_size'? 912 | cvm->mmio_end = user_data.data_start + user_data.data_size; | ^~~~~~~~~ | ram_size include/uapi/linux/kvm.h:1557:8: note: 'ram_size' declared here 1557 | __u64 ram_size; | ^ >> arch/arm64/kvm/virtcca_cvm.c:992:5: warning: no previous prototype for function 'kvm_cvm_vgic_nr_lr' [-Wmissing-prototypes] 992 | u32 kvm_cvm_vgic_nr_lr(void) | ^ arch/arm64/kvm/virtcca_cvm.c:992:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 992 | u32 kvm_cvm_vgic_nr_lr(void) | ^ | static arch/arm64/kvm/virtcca_cvm.c:1311:5: warning: no previous prototype for function 'cvm_arm_smmu_domain_set_kvm' [-Wmissing-prototypes] 1311 | int cvm_arm_smmu_domain_set_kvm(struct device *dev, void *data) | ^ arch/arm64/kvm/virtcca_cvm.c:1311:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 1311 | int cvm_arm_smmu_domain_set_kvm(struct device *dev, void *data) | ^ | static 3 warnings and 15 errors generated. vim +/kvm_cvm_vgic_nr_lr +992 arch/arm64/kvm/virtcca_cvm.c 991 > 992 u32 kvm_cvm_vgic_nr_lr(void) 993 { 994 return kvm_vgic_global_state.nr_lr; 995 } 996 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-5.10 0/2] *** fix CVE-2022-49623 ***
by Bowen You 13 Aug '25

13 Aug '25

*** BLURB HERE *** Christophe JAILLET (1): powerpc/xive: Add some error handling code to 'xive_spapr_init()' Nathan Lynch (1): powerpc/xive/spapr: correct bitmap allocation size arch/powerpc/sysdev/xive/spapr.c | 30 ++++++++++++++++++++++-------- 1 file changed, 22 insertions(+), 8 deletions(-) -- 2.34.1

2 3

[PATCH OLK-6.6 0/1] CVE-2025-38473
by Yongqiang Liu 13 Aug '25

13 Aug '25

Kuniyuki Iwashima (1): Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb() net/bluetooth/l2cap_sock.c | 3 +++ 1 file changed, 3 insertions(+) -- 2.34.1

2 2

[PATCH openEuler-1.0-LTS] do_change_type(): refuse to operate on unmounted/not ours mounts
by Long Li 13 Aug '25

13 Aug '25

From: Al Viro <viro(a)zeniv.linux.org.uk> mainline inclusion from mainline-v6.15 commit 12f147ddd6de7382dad54812e65f3f08d05809fc category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ICPSUV CVE: CVE-2025-38498 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- Ensure that propagation settings can only be changed for mounts located in the caller's mount namespace. This change aligns permission checking with the rest of mount(2). Reviewed-by: Christian Brauner <brauner(a)kernel.org> Fixes: 07b20889e305 ("beginning of the shared-subtree proper") Reported-by: "Orlando, Noah" <Noah.Orlando(a)deshaw.com> Signed-off-by: Al Viro <viro(a)zeniv.linux.org.uk> Signed-off-by: Long Li <leo.lilong(a)huawei.com> --- fs/namespace.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/fs/namespace.c b/fs/namespace.c index b682a044cf0e..ef1398d176c6 100644 --- a/fs/namespace.c +++ b/fs/namespace.c @@ -2210,6 +2210,10 @@ static int do_change_type(struct path *path, int ms_flags) return -EINVAL; namespace_lock(); + if (!check_mnt(mnt)) { + err = -EINVAL; + goto out_unlock; + } if (type == MS_SHARED) { err = invent_group_ids(mnt, recurse); if (err) -- 2.39.2

2 1

[PATCH 0/1] CVE-2025-38473
by Yongqiang Liu 13 Aug '25

13 Aug '25

Kuniyuki Iwashima (1): Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb() net/bluetooth/l2cap_sock.c | 3 +++ 1 file changed, 3 insertions(+) -- 2.34.1

1 0