From nobody Tue Jan 11 19:39:14 2022 X-Original-To: freebsd-announce@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 9EE65193A4C1 for ; Tue, 11 Jan 2022 19:39:15 +0000 (UTC) (envelope-from security-advisories@freebsd.org) Received: from freefall.freebsd.org (freefall.freebsd.org [96.47.72.132]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "freefall.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4JYLc24vQBz3Hk5; Tue, 11 Jan 2022 19:39:14 +0000 (UTC) (envelope-from security-advisories@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1641929955; h=from:from:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc; bh=CO1+eECP7wSGVSGjIFAdYXBzpywxdA72eUYWWcLLsmY=; b=DebWfVyhppeL/ifg38XlajiIUunwIT0JWHLapZ++POKY+B0eeMzzss8ygBxgO/E+3JNBi1 NZcerPEIR4ok8pkoCZZ2vCexhXzDRbEA+BPEN/ByNpcDq8DTyTaDtXi+K5wdlIe2J+Ae6E 2MZOFo3kCk/aVvhmiXz/NnK5Z5f5+wx/eQMXYJcWHHltHgTYjjXQW2DKBz/E41M1oic3gG xx0S/TI3eB8yQu/hz8VO1rMvzGS2YDRBNh/rky/S3sm9uZ8c6Dtv7kIpoXT7DaS99ljx1E cXGmQMYxhm9nATohqkG94i1jDHZH4FleSpZQLENxX+NR6a4c965+vv1Omk9AaA== Received: by freefall.freebsd.org (Postfix, from userid 945) id 4D8F91D936; Tue, 11 Jan 2022 19:39:14 +0000 (UTC) From: FreeBSD Errata Notices To: FreeBSD Errata Notices Subject: [FreeBSD-Announce] FreeBSD Errata Notice FreeBSD-EN-22:04.pcid Reply-To: freebsd-stable@freebsd.org Precedence: bulk Approved: BingGo! Message-Id: <20220111193914.4D8F91D936@freefall.freebsd.org> Date: Tue, 11 Jan 2022 19:39:14 +0000 (UTC) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1641929954; h=from:from:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc; bh=CO1+eECP7wSGVSGjIFAdYXBzpywxdA72eUYWWcLLsmY=; b=NxsfpNr1q963Eo3T3nAfIeN4hWOCkC/VfZ5vaAbaRj92HjwK3fB0BtxQ0SaZfscn/jQeBE OPrvfAOBXR9zR89wKpnAmsC5StYQrDfg95ezMCYUe/X1bbBkCMC6VW+WlOVKa79aBzmjIO X7QkJtuXFPBNbjBIXo0n2MOgAQ7q3Z68Q57V2rezVP4/2FKcXkr4gvwl2NvkXSUaWrbL3X NvMUNqTivLS8n+JuN4sqwCRPfvG2Ymn21m+igUOauA1leIJrfsNTRcm1CAxuBinlgNm12h WDxL3jM35W+DMW99HQfeIcP2fFmY4uC7/n/G7IBM1yAIFUt+L1RAOvESAKq5MQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1641929954; a=rsa-sha256; cv=none; b=Du4b8ygb0fOgoB/H+lhggrlyscuN3kmW8oXOh9IsicON8k3UVo5zK5VwuKH1vs2ZhJ8F7p fE3fDOEgGFQRxBsdSZUqfAktxPoq9lLzkMBAflVHnN1Na4lDS+ntprfLSvrPVw7jTFRwpi i1eQamvreNFoN1V0eKb+Lz1Z9oBpg/CjkGeqek/voZ8qRHD80g0ReiIVpbeRcgWFbBRW9e he5Bc98kSI0rAS7cI9Uu+p0GFuA9f8bbzeLY2nLYUm4qQLm8Halb4mvLz3V9vhcZ5Gm9sR h1Vcb7vxWkHanVG+zEqfZLkb9gcaMMUSUswI2hKUJ8oIDeuwZ4itbbbIoNDEAg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none X-ThisMailContainsUnwantedMimeParts: N List-Id: Project Announcements [moderated] List-Archive: https://lists.freebsd.org/archives/freebsd-announce List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-announce@freebsd.org X-BeenThere: freebsd-announce@freebsd.org -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-EN-22:04.pcid Errata Notice The FreeBSD Project Topic: Incorrect PCID mode invalidations Category: core Module: kernel Announced: 2022-01-11 Affects: FreeBSD 12.x Corrected: 2021-12-14 14:46:07 UTC (stable/12, 12.3-STABLE) 2022-01-11 18:19:29 UTC (releng/12.3, 12.3-RELEASE-p1) 2022-01-11 18:33:17 UTC (releng/12.2, 12.2-RELEASE-p12) For general information regarding FreeBSD Errata Notices and Security Advisories, including descriptions of the fields above, security branches, and the following sections, please visit . I. Background When switching address spaces the kernel must flush stale Translation Lookaside Buffer (TLB) entries to ensure that correct data is visible to the CPU. An Inter Processor Interrupt (IPI) is used to signal other CPUs of the need to flush TLB entries. PCID is an optimization that associates each page table with an identifier (i.e., Process ID) to allow for efficient context switching. II. Problem Description Operations specific to TLB invalidation in PCID mode were misordered with respect to IPI transmission. III. Impact This issue may cause stale TLB translation entries (and hence invalid data) in multithreaded applications, leading to application misbehaviour. IV. Workaround PCID may be disabled by adding the following line to /boot/loader.conf: vm.pmap.pcid_enabled=0 V. Solution Upgrade your system to a supported FreeBSD stable or release / security branch (releng) dated after the correction date, and reboot. Perform one of the following: 1) To update your system via a binary patch: Systems running a RELEASE version of FreeBSD on the amd64, i386, or (on FreeBSD 13 and later) arm64 platforms can be updated via the freebsd-update(8) utility: # freebsd-update fetch # freebsd-update install # shutdown -r +10min "Rebooting for an errata update" 2) To update your system via a source code patch: The following patches have been verified to apply to the applicable FreeBSD release branches. a) Download the relevant patch from the location below, and verify the detached PGP signature using your PGP utility. # fetch https://security.FreeBSD.org/patches/EN-22:04/pcid.patch # fetch https://security.FreeBSD.org/patches/EN-22:04/pcid.patch.asc # gpg --verify pcid.patch.asc b) Apply the patch. Execute the following commands as root: # cd /usr/src # patch < /path/to/patch c) Recompile your kernel as described in and reboot the system. VI. Correction details This issue is corrected by the corresponding Git commit hash or Subversion revision number in the following stable and release branches: Branch/path Hash Revision - ------------------------------------------------------------------------- stable/12/ r371237 releng/12.3/ r371485 releng/12.2/ r371490 - ------------------------------------------------------------------------- Run the following command to see which files were modified by a particular revision, replacing NNNNNN with the revision number: # svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base Or visit the following URL, replacing NNNNNN with the revision number: VII. References The latest revision of this advisory is available at -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAmHd1f0ACgkQ05eS9J6n 5cKgjQ//QW16Hxk3gfCvYOKk1PAxDmov2RlSENPrIT/LaHq6UVjGOsB/xaRGFK7U peWDMtyIQHboTG2RW819xAuB0ZRk7tLzZU9oOIQlQBWwV9qugre9pBLOHhbr98wX D4tZ1nFN3Yz55I2RWPzyT+ncF2NdsXAJLuBtmb4Uj+MPqMl7dhj01X82vPaFvjJH tJDMyWTgWHGJlGRk8ZcQ48gF3/G5p3xV6oD0axCQ+RXz9Sx8y4xX+uW2IUskTFkD ukbRHiNG+Mh1Jt4R9TC92AIvIvFhODts8+R1/1BtARQ76exfYDw6mIf+JC2oCX5+ TrUmk7G8/cxCMyafVNU5+qqVx2qQBcJ8MG/4JwjlEl1kYy9w4ehhB1R7jJtJdfkr CD92bhJcPnS4zB7M90qTanPA+B7QlBWsbxXEaYmy1jyPZFl7KWLNxME6Ywf9BTpW oNE6Jnc77EkWWEMpYAk9i5udRCmxDDnYVFaMWuJR3GaSi4yKNxz4P1jsqOYWLR0v M+fjV6/PJnzn1xZBAWyCHrNT2gUbHxSrjEuHA1r6BKXt59lRFw5VEjwE05T9R7nd gSi12DEkzvz2ijq5iDFblKmW4B6f8jZsnLpaH/c+U5JfaiEotxb+fg2XCyBzxot5 teHqbyKYYKGWmwRl09HyVB9rSawKibmQqCvhGSpxqSjJTInHLpM= =1FCm -----END PGP SIGNATURE-----