Skip to content

Commit

Permalink
chore: update kernel and microcode
Browse files Browse the repository at this point in the history
This should provide software mitigations for the below when microcode
patches are not yet available:

- https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/technical-documentation/gather-data-sampling.html
- https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7005.html

The linux-microcode update should have microcode fixes for ZenBleed.

Signed-off-by: Noel Georgi <git@frezbo.dev>
  • Loading branch information
frezbo committed Aug 9, 2023
1 parent 2abca48 commit fb247b5
Show file tree
Hide file tree
Showing 3 changed files with 12 additions and 8 deletions.
12 changes: 6 additions & 6 deletions Pkgfile
Original file line number Diff line number Diff line change
Expand Up @@ -68,9 +68,9 @@ vars:
ipxe_sha512: 6ae707f53a657b7c7974cf4b3f9cba576147c2ec54d780484b18f053bdaa70cede45d01e667733b4a23c8661aa536f56da257fddac0212ef9a0f5ec52c54e0fd

# renovate: datasource=git-tags extractVersion=^v(?<version>.*)$ depName=git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
linux_version: 6.1.42
linux_sha256: aaf8261b551c8b76b81eab8780b446e88cea4d551ae517ac3a9b2dbdbd381ed3
linux_sha512: b3a0c682bb2234c3ec36f6302f4b39dfd501e667c39d10e2f0994b3d3dfbdc461728686d4d451b798173a76fe2ae24d8a6ab43bf869e9291d1111975405db22c
linux_version: 6.1.44
linux_sha256: 2e51d41fe11d082ae167cee05772bb07ca7f19448d2b46772d8ca2db7673a1a5
linux_sha512: c1c29b785ada9c34e7ca1b11ece4568953d636d097590c9b62d49762d60a9c2b430749c323bcd016e1759259267196cfe0f87322e3c748cf0b1d2e31b94da979

# renovate: datasource=git-tags extractVersion=^v(?<version>.*)$ depName=git://git.kernel.org/pub/scm/utils/kernel/kmod/kmod.git
kmod_version: 30
Expand Down Expand Up @@ -113,9 +113,9 @@ vars:
liburcu_sha512: 7297e51012f4c44ee27c0e18ed9d87bf24be34db68a5398394c1e683a045bb561cf74aa913398404c0ed5cb8011af728ea12947717fa5f27627e5ca78e63a40f

# renovate: datasource=git-tags depName=git://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git
linux_firmware_version: 20230625
linux_firmware_sha256: 2f609c503bde5ee6c32336a465c48e939138b8263504d3f7d03ec65ace80b130
linux_firmware_sha512: 5e25d9b400486f6ef6e03bedd023b54467b2d2ae12f9279d299765de96831ea483e67b4859af1e0e8d6a7781173abee4954f84b67e3309836944c5ad6ebe0956
linux_firmware_version: 20230804
linux_firmware_sha256: c09913f675bea9623798eebf8b238cda49b62dfa1729cc7c2c17193b0ab22ff7
linux_firmware_sha512: 79044fa88887f7cc648ab7f2a77a032cc4f20c21a09ba0e8c1ce2785cafc8eff69517ac21e710100a42d0e5e1a98bda6e357acd3b0edbf56f5e3b944df22d01e

# renovate: datasource=git-tags extractVersion=^v(?<version>.*)$ depName=git://sourceware.org/git/lvm2.git
lvm2_version: 2_03_21
Expand Down
5 changes: 4 additions & 1 deletion kernel/build/config-amd64
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
#
# Automatically generated file; DO NOT EDIT.
# Linux/x86 6.1.42 Kernel Configuration
# Linux/x86 6.1.44 Kernel Configuration
#
CONFIG_CC_VERSION_TEXT="gcc (GCC) 12.3.0"
CONFIG_CC_IS_GCC=y
Expand Down Expand Up @@ -498,7 +498,9 @@ CONFIG_RETHUNK=y
CONFIG_CPU_UNRET_ENTRY=y
CONFIG_CPU_IBPB_ENTRY=y
CONFIG_CPU_IBRS_ENTRY=y
CONFIG_CPU_SRSO=y
# CONFIG_SLS is not set
# CONFIG_GDS_FORCE_MITIGATION is not set
CONFIG_ARCH_HAS_ADD_PAGES=y
CONFIG_ARCH_MHP_MEMMAP_ON_MEMORY_ENABLE=y

Expand Down Expand Up @@ -715,6 +717,7 @@ CONFIG_GENERIC_SMP_IDLE_THREAD=y
CONFIG_ARCH_HAS_FORTIFY_SOURCE=y
CONFIG_ARCH_HAS_SET_MEMORY=y
CONFIG_ARCH_HAS_SET_DIRECT_MAP=y
CONFIG_ARCH_HAS_CPU_FINALIZE_INIT=y
CONFIG_HAVE_ARCH_THREAD_STRUCT_WHITELIST=y
CONFIG_ARCH_WANTS_DYNAMIC_TASK_STRUCT=y
CONFIG_ARCH_WANTS_NO_INSTR=y
Expand Down
3 changes: 2 additions & 1 deletion kernel/build/config-arm64
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
#
# Automatically generated file; DO NOT EDIT.
# Linux/arm64 6.1.42 Kernel Configuration
# Linux/arm64 6.1.44 Kernel Configuration
#
CONFIG_CC_VERSION_TEXT="gcc (GCC) 12.3.0"
CONFIG_CC_IS_GCC=y
Expand Down Expand Up @@ -344,6 +344,7 @@ CONFIG_ARCH_ZYNQMP=y
#
# ARM errata workarounds via the alternatives framework
#
CONFIG_AMPERE_ERRATUM_AC03_CPU_38=y
CONFIG_ARM64_WORKAROUND_CLEAN_CACHE=y
CONFIG_ARM64_ERRATUM_826319=y
CONFIG_ARM64_ERRATUM_827319=y
Expand Down

0 comments on commit fb247b5

Please sign in to comment.