Wind River Support Network

Description

In the Linux kernel, the following vulnerability has been resolved:[EOL][EOL]x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()[EOL][EOL]Define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() to ensure[EOL]page tables are properly synchronized when calling p*d_populate_kernel().[EOL][EOL]For 5-level paging, synchronization is performed via[EOL]pgd_populate_kernel().  In 4-level paging, pgd_populate() is a no-op, so[EOL]synchronization is instead performed at the P4D level via[EOL]p4d_populate_kernel().[EOL][EOL]This fixes intermittent boot failures on systems using 4-level paging and[EOL]a large amount of persistent memory:[EOL][EOL]  BUG: unable to handle page fault for address: ffffe70000000034[EOL]  #PF: supervisor write access in kernel mode[EOL]  #PF: error_code(0x0002) - not-present page[EOL]  PGD 0 P4D 0[EOL]  Oops: 0002 [#1] SMP NOPTI[EOL]  RIP: 0010:__init_single_page+0x9/0x6d[EOL]  Call Trace:[EOL]   <TASK>[EOL]   __init_zone_device_page+0x17/0x5d[EOL]   memmap_init_zone_device+0x154/0x1bb[EOL]   pagemap_range+0x2e0/0x40f[EOL]   memremap_pages+0x10b/0x2f0[EOL]   devm_memremap_pages+0x1e/0x60[EOL]   dev_dax_probe+0xce/0x2ec [device_dax][EOL]   dax_bus_probe+0x6d/0xc9[EOL]   [... snip ...][EOL]   </TASK>[EOL][EOL]It also fixes a crash in vmemmap_set_pmd() caused by accessing vmemmap[EOL]before sync_global_pgds() [1]:[EOL][EOL]  BUG: unable to handle page fault for address: ffffeb3ff1200000[EOL]  #PF: supervisor write access in kernel mode[EOL]  #PF: error_code(0x0002) - not-present page[EOL]  PGD 0 P4D 0[EOL]  Oops: Oops: 0002 [#1] PREEMPT SMP NOPTI[EOL]  Tainted: [W]=WARN[EOL]  RIP: 0010:vmemmap_set_pmd+0xff/0x230[EOL]   <TASK>[EOL]   vmemmap_populate_hugepages+0x176/0x180[EOL]   vmemmap_populate+0x34/0x80[EOL]   __populate_section_memmap+0x41/0x90[EOL]   sparse_add_section+0x121/0x3e0[EOL]   __add_pages+0xba/0x150[EOL]   add_pages+0x1d/0x70[EOL]   memremap_pages+0x3dc/0x810[EOL]   devm_memremap_pages+0x1c/0x60[EOL]   xe_devm_add+0x8b/0x100 [xe][EOL]   xe_tile_init_noalloc+0x6a/0x70 [xe][EOL]   xe_device_probe+0x48c/0x740 [xe][EOL]   [... snip ...]