1 files changed, 136 insertions, 0 deletions
diff --git a/common/recipes-kernel/linux/linux-yocto-4.9.21/upstream-backports.scc b/common/recipes-kernel/linux/linux-yocto-4.9.21/upstream-backports.scc
index 06d6de30..e7fb7846 100644
--- a/common/recipes-kernel/linux/linux-yocto-4.9.21/upstream-backports.scc
+++ b/common/recipes-kernel/linux/linux-yocto-4.9.21/upstream-backports.scc
@@ -167,3 +167,139 @@ patch 0011-x86-retpoline-Support-retpoline-builds-with-Clang.patch
 patch 0012-x86-speculation-objtool-Annotate-indirect-calls-jump.patch
 patch 0013-x86-boot-objtool-Annotate-indirect-jump-in-secondary.patch
 patch 0014-x86-speculation-Move-firmware_restrict_branch_specul.patch
+patch 0001-KVM-Fix-stack-out-of-bounds-read-in-write_mmio.patch
+patch 0002-kvm-vmx-Scrub-hardware-GPRs-at-VM-exit.patch
+patch 0003-KVM-x86-Add-memory-barrier-on-vmcs-field-lookup.patch
+patch 0004-KVM-x86-emulator-Return-to-user-mode-on-L1-CPL-0-emu.patch
+patch 0005-KVM-x86-Don-t-re-execute-instruction-when-not-passin.patch
+patch 0006-KVM-X86-Fix-operand-address-size-during-instruction-.patch
+patch 0007-KVM-x86-ioapic-Fix-level-triggered-EOI-and-IOAPIC-re.patch
+patch 0008-KVM-x86-ioapic-Clear-Remote-IRR-when-entry-is-switch.patch
+patch 0009-KVM-x86-ioapic-Preserve-read-only-values-in-the-redi.patch
+patch 0010-KVM-VMX-Fix-rflags-cache-during-vCPU-reset.patch
+patch 0011-KVM-x86-Make-indirect-calls-in-emulator-speculation-.patch
+patch 0012-KVM-VMX-Make-indirect-call-speculation-safe.patch
+patch 0013-x86-kvm-Update-spectre-v1-mitigation.patch
+patch 0014-KVM-nVMX-kmap-can-t-fail.patch
+patch 0015-KVM-nVMX-vmx_complete_nested_posted_interrupt-can-t-.patch
+patch 0016-KVM-nVMX-mark-vmcs12-pages-dirty-on-L2-exit.patch
+patch 0017-KVM-nVMX-Eliminate-vmcs02-pool.patch
+patch 0018-KVM-VMX-introduce-alloc_loaded_vmcs.patch
+patch 0019-KVM-VMX-make-MSR-bitmaps-per-VCPU.patch
+patch 0020-KVM-x86-Add-IBPB-support.patch
+patch 0021-KVM-VMX-Emulate-MSR_IA32_ARCH_CAPABILITIES.patch
+patch 0022-KVM-VMX-Allow-direct-access-to-MSR_IA32_SPEC_CTRL.patch
+patch 0023-KVM-SVM-Allow-direct-access-to-MSR_IA32_SPEC_CTRL.patch
+patch 0024-KVM-nVMX-Fix-races-when-sending-nested-PI-while-dest.patch
+patch 0025-KVM-x86-Reduce-retpoline-performance-impact-in-slot_.patch
+patch 0026-KVM-x86-fix-escape-of-guest-dr6-to-the-host.patch
+patch 0027-x86-add-MULTIUSER-dependency-for-KVM.patch
+patch 0028-KVM-add-X86_LOCAL_APIC-dependency.patch
+patch 0029-KVM-async_pf-Fix-DF-due-to-inject-Page-not-Present-a.patch
+patch 0030-KVM-VMX-clean-up-declaration-of-VPID-EPT-invalidatio.patch
+patch 0031-KVM-nVMX-invvpid-handling-improvements.patch
+patch 0032-KVM-x86-Remove-indirect-MSR-op-calls-from-SPEC_CTRL.patch
+patch 0033-KVM-VMX-Optimize-vmx_vcpu_run-and-svm_vcpu_run-by-ma.patch
+patch 0001-x86-paravirt-objtool-Annotate-indirect-calls.patch
+patch 0002-x86-module-Detect-and-skip-invalid-relocations.patch
+patch 0003-kvm-svm-Setup-MCG_CAP-on-AMD-properly.patch
+patch 0004-kvm-nVMX-Disallow-userspace-injected-exceptions-in-g.patch
+patch 0005-x86-cpufeatures-Add-Intel-PCONFIG-cpufeature.patch
+patch 0006-x86-speculation-objtool-Annotate-indirect-calls-jump.patch
+patch 0007-x86-speculation-Remove-Skylake-C2-from-Speculation-C.patch
+patch 0008-x86-reboot-Turn-off-KVM-when-halting-a-CPU.patch
+patch 0009-x86-KASLR-Fix-kexec-kernel-boot-crash-when-KASLR-ran.patch
+patch 0010-kvm-x86-fix-icebp-instruction-handling.patch
+patch 0011-bpf-x64-increase-number-of-passes.patch
+patch 0012-x86-mm-kaslr-Use-the-_ASM_MUL-macro-for-multiplicati.patch
+patch 0013-KVM-X86-Fix-preempt-the-preemption-timer-cancel.patch
+patch 0014-KVM-nVMX-Fix-handling-of-lmsw-instruction.patch
+patch 0015-KVM-SVM-do-not-zero-out-segment-attributes-if-segmen.patch
+patch 0016-KVM-nVMX-Update-vmcs12-guest_linear_address-on-neste.patch
+patch 0017-perf-x86-Fix-possible-Spectre-v1-indexing-for-hw_per.patch
+patch 0018-perf-x86-cstate-Fix-possible-Spectre-v1-indexing-for.patch
+patch 0019-perf-x86-msr-Fix-possible-Spectre-v1-indexing-in-the.patch
+patch 0020-perf-x86-Fix-possible-Spectre-v1-indexing-for-x86_pm.patch
+patch 0021-x86-amd-don-t-set-X86_BUG_SYSRET_SS_ATTRS-when-runni.patch
+patch 0022-x86-nospec-Simplify-alternative_msr_write.patch
+patch 0023-x86-bugs-Concentrate-bug-detection-into-a-separate-f.patch
+patch 0024-x86-bugs-Concentrate-bug-reporting-into-a-separate-f.patch
+patch 0025-x86-bugs-Read-SPEC_CTRL-MSR-during-boot-and-re-use-r.patch
+patch 0026-x86-bugs-KVM-Support-the-combination-of-guest-and-ho.patch
+patch 0027-x86-bugs-Expose-sys-.-spec_store_bypass.patch
+patch 0028-x86-cpufeatures-Add-X86_FEATURE_RDS.patch
+patch 0029-x86-bugs-Provide-boot-parameters-for-the-spec_store_.patch
+patch 0030-x86-bugs-intel-Set-proper-CPU-features-and-setup-RDS.patch
+patch 0031-x86-bugs-Whitelist-allowed-SPEC_CTRL-MSR-values.patch
+patch 0032-x86-bugs-AMD-Add-support-to-disable-RDS-on-Fam-15-16.patch
+patch 0033-x86-KVM-VMX-Expose-SPEC_CTRL-Bit-2-to-the-guest.patch
+patch 0034-x86-speculation-Create-spec-ctrl.h-to-avoid-include-.patch
+patch 0035-x86-process-Optimize-TIF-checks-in-__switch_to_xtra.patch
+patch 0036-x86-process-Correct-and-optimize-TIF_BLOCKSTEP-switc.patch
+patch 0037-x86-process-Optimize-TIF_NOTSC-switch.patch
+patch 0038-x86-process-Allow-runtime-control-of-Speculative-Sto.patch
+patch 0039-x86-speculation-Add-prctl-for-Speculative-Store-Bypa.patch
+patch 0040-nospec-Move-array_index_nospec-parameter-checking-in.patch
+patch 0041-nospec-Allow-index-argument-to-have-const-qualified-.patch
+patch 0042-nospec-Kill-array_index_nospec_mask_check.patch
+patch 0043-nospec-Include-asm-barrier.h-dependency.patch
+patch 0044-prctl-Add-speculation-control-prctls.patch
+patch 0045-nospec-Allow-getting-setting-on-non-current-task.patch
+patch 0046-x86-bugs-Make-boot-modes-__ro_after_init.patch
+patch 0047-fs-proc-Report-eip-esp-in-prod-PID-stat-for-coredump.patch
+patch 0048-proc-fix-coredump-vs-read-proc-stat-race.patch
+patch 0049-proc-Provide-details-on-speculation-flaw-mitigations.patch
+patch 0050-prctl-Add-force-disable-speculation.patch
+patch 0051-seccomp-fix-the-usage-of-get-put_seccomp_filter-in-s.patch
+patch 0052-seccomp-Enable-speculation-flaw-mitigations.patch
+patch 0053-seccomp-Use-PR_SPEC_FORCE_DISABLE.patch
+patch 0054-seccomp-Add-filter-flag-to-opt-out-of-SSB-mitigation.patch
+patch 0055-seccomp-Move-speculation-migitation-control-to-arch-.patch
+patch 0056-x86-speculation-Make-seccomp-the-default-mode-for-Sp.patch
+patch 0057-x86-bugs-Rename-_RDS-to-_SSBD.patch
+patch 0058-x86-bugs-Fix-__ssb_select_mitigation-return-type.patch
+patch 0059-x86-bugs-Make-cpu_show_common-static.patch
+patch 0060-x86-bugs-Fix-the-parameters-alignment-and-missing-vo.patch
+patch 0061-x86-cpu-Make-alternative_msr_write-work-for-32-bit-c.patch
+patch 0062-KVM-SVM-Move-spec-control-call-after-restore-of-GS.patch
+patch 0063-x86-speculation-Use-synthetic-bits-for-IBRS-IBPB-STI.patch
+patch 0064-x86-cpufeatures-Disentangle-MSR_SPEC_CTRL-enumeratio.patch
+patch 0065-x86-cpufeatures-Disentangle-SSBD-enumeration.patch
+patch 0066-x86-cpu-AMD-Fix-erratum-1076-CPB-bit.patch
+patch 0067-x86-cpufeatures-Add-FEATURE_ZEN.patch
+patch 0068-x86-speculation-Handle-HT-correctly-on-AMD.patch
+patch 0069-x86-bugs-KVM-Extend-speculation-control-for-VIRT_SPE.patch
+patch 0070-x86-speculation-Add-virtualized-speculative-store-by.patch
+patch 0071-x86-speculation-Rework-speculative_store_bypass_upda.patch
+patch 0072-x86-bugs-Unify-x86_spec_ctrl_-set_guest-restore_host.patch
+patch 0073-x86-bugs-Expose-x86_spec_ctrl_base-directly.patch
+patch 0074-x86-bugs-Remove-x86_spec_ctrl_set.patch
+patch 0075-x86-bugs-Rework-spec_ctrl-base-and-mask-logic.patch
+patch 0076-x86-speculation-KVM-Implement-support-for-VIRT_SPEC_.patch
+patch 0077-KVM-SVM-Implement-VIRT_SPEC_CTRL-support-for-SSBD.patch
+patch 0078-x86-bugs-Rename-SSBD_NO-to-SSB_NO.patch
+patch 0079-x86-kexec-Avoid-double-free_page-upon-do_kexec_load-.patch
+patch 0080-KVM-VMX-Expose-SSBD-properly-to-guests.patch
+patch 0081-KVM-x86-Update-cpuid-properly-when-CR4.OSXAVE-or-CR4.patch
+patch 0082-kvm-x86-IA32_ARCH_CAPABILITIES-is-always-supported.patch
+patch 0083-kvm-x86-fix-KVM_XEN_HVM_CONFIG-ioctl.patch
+patch 0084-KVM-VMX-raise-internal-error-for-exception-during-in.patch
+patch 0085-KVM-lapic-stop-advertising-DIRECTED_EOI-when-in-kern.patch
+patch 0086-objtool-Improve-detection-of-BUG-and-other-dead-ends.patch
+patch 0087-objtool-Move-checking-code-to-check.c.patch
+patch 0088-objtool-sync-up-with-the-4.14.47-version-of-objtool.patch
+patch 0089-objtool-x86-Add-several-functions-and-files-to-the-o.patch
+patch 0090-x86-xen-Add-unwind-hint-annotations-to-xen_setup_gdt.patch
+patch 0091-x86-amd-revert-commit-944e0fc51a89c9827b9.patch
+patch 0092-xen-set-cpu-capabilities-from-xen_start_kernel.patch
+patch 0093-x86-amd-don-t-set-X86_BUG_SYSRET_SS_ATTRS-when-runni.patch
+patch 0001-KVM-VMX-Expose-SSBD-properly-to-guests-4.9-supplemen.patch
+patch 0002-complete-e390f9a-port-for-v4.9.106.patch
+patch 0003-KVM-x86-introduce-linear_-read-write-_system.patch
+patch 0004-KVM-x86-pass-kvm_vcpu-to-kvm_read_guest_virt-and-kvm.patch
+patch 0005-kvm-x86-use-correct-privilege-level-for-sgdt-sidt-fx.patch
+patch 0006-x86-spectre_v1-Disable-compiler-optimizations-over-a.patch
+patch 0007-x86-mce-Improve-error-message-when-kernel-cannot-rec.patch
+patch 0008-x86-mce-Check-for-alternate-indication-of-machine-ch.patch
+patch 0009-x86-mce-Fix-incorrect-Machine-check-from-unknown-sou.patch
+patch 0010-x86-mce-Do-not-overwrite-MCi_STATUS-in-mce_no_way_ou.patch