# changelog

author: Shile Zhang <shile.zhang@linux.alibaba.com> [5.16.0-1_rc3.an23]
changelog:
  - platform/x86: intel_tdx_attest: Add TDX Guest attestation interface driver (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add TDX Guest event notify interrupt vector support (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add SetupEventNotifyInterrupt TDX hypercall support (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add GetQuote TDX hypercall support (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add TDREPORT TDX Module call support (Kuppuswamy Sathyanarayanan)


author: Shile Zhang <shile.zhang@linux.alibaba.com> [5.17.0-1.an23]
changelog:
  - x86/tdx: Disable CQM in guest (Andi Kleen)
  - x86/tdx: Use CPUID 0x15 to get early TSC frequency (Andi Kleen)
  - virtio 9p: Fix an overflow (Andi Kleen)
  - virtio console: Harden port adding (Andi Kleen)
  - tdx: Disable ASPM with device filter (Andi Kleen)
  - tdx: Disable PCIE features with device filter (Andi Kleen)
  - tdx: Disable SRIOV with device filter (Andi Kleen)
  - x86/tdx: Enable panic_on_oops by default in TDX (Andi Kleen)
  - platform/x86/intel-uncore-freq: Disable uncore frequency support for VM guest (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Disable X86_FEATURE_TME,X86_FEATURE_APERFMPERF Capability (Andi Kleen)
  - x86/tdx: Disable X86_FEATURE_MTRR Capability (Andi Kleen)
  - x86/tdx: Disable X86_FEATURE_MCE Capability (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Block Xen initialization in TDX (Andi Kleen)
  - x86/tdx: Mark the TSC in TDs reliable (Andi Kleen)
  - clocksource/acpi_pm: Disable in TDX (Andi Kleen)
  - x86/tdx: Disable kvmclock in TDX (Andi Kleen)
  - x86/tdx: Disable enhanced PCI parsing for TDX (Andi Kleen)
  - pci: Don't run PCI quirks in TDX guest (Andi Kleen)
  - x86/tdx: Disable MMCONF for TDX guest (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Disable early PCI in TDX (Andi Kleen)
  - x86/tdx: Avoid early broadcom workaround when early PCI is disabled (Andi Kleen)
  - x86/tdx: Disable AMD northbridges (Andi Kleen)
  - x86/tdx: Disable split lock enabling for Sapphire Rapids (Andi Kleen)
  - virtio console: Harden multiport against invalid host input (Andi Kleen)
  - iomap: Mark ioremap shared when the device is authorized (Andi Kleen)
  - PCI: Mark MSI data shared if device was authorized (Andi Kleen)
  - x86/tdx: Implement ioremap_driver_hardened for x86 (Andi Kleen)
  - asm/io.h: Add ioremap_driver_hardening (Andi Kleen)
  - x86/tdx: Implement port I/O filtering (Kirill A. Shutemov)
  - x86/tdx: Add tdx_debug_enabled() interface (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add command line option to disable TDX guest filter support (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add command line option to override device allow list (Kuppuswamy Sathyanarayanan)
  - PCI: Initialize authorized attribute for confidential guest (Kuppuswamy Sathyanarayanan)
  - virtio: Initialize authorized attribute for confidential guest (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add device filter support for x86 TDX guest platform (Kuppuswamy Sathyanarayanan)
  - driver core: Allow arch to initialize the authorized attribute (Kuppuswamy Sathyanarayanan)
  - driver core: Add common support to skip probe for un-authorized devices (Kuppuswamy Sathyanarayanan)
  - driver core: Move the "authorized" attribute from USB/Thunderbolt to core (Kuppuswamy Sathyanarayanan)


author: Qiao Ma <mqaio@linux.alibaba.com> [5.19.0-1_rc1.an23]
changelog:
  - configs: refresh the ANCK default configs (Qiao Ma)
  - bump kernel to 5.19.0 (Qiao Ma)
  - tools/tdx: Add a sample attestation user app (zhiminghufighting)
  - platform/x86: Add RTMR update interface (Andi Kleen)
  - x86/tdx: Add CONFIG option for KVM SDV workarounds (Andi Kleen)
  - x86/tdx: Use VMCALL in place of actual TDCALL opcode (Sean Christopherson)
  - x86/tdx: Add config options for platform fixes (Kuppuswamy Sathyanarayanan)
  - virtio: Force IOMMU flag for SDV qemu (Andi Kleen)
  - x86/tdx: Add command line option to force TDX mode (Kuppuswamy Sathyanarayanan)
  - x86/apic: Do apic driver probe for "nosmp" use case (Kuppuswamy Sathyanarayanan)
  - x86/tdx-tests: Add a port of a kvm unit test (Alexander Shishkin)
  - x86/tdx: Fix single-stepping through emulated instructions (Alexander Shishkin)
  - x86/tdx: Allow SVKL ACPI table (Kuppuswamy Sathyanarayanan)
  - ACPI: Add SVKL table support (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add a command line option to add new ACPI tables to the filter (Andi Kleen)
  - x86/tdx: Limit the list of ACPI tables allowed (Kuppuswamy Sathyanarayanan)
  - ACPICA: Add ACPI table filter support (Kuppuswamy Sathyanarayanan)
  - x86/swiotlb: Adjust SWIOTLB bounce buffer size for TDX guests (Kirill A. Shutemov)
  - swiotlb: Split up single swiotlb lock (Andi Kleen)
  - x86/tdx: Injection interface for fuzzer (Andi Kleen)
  - tdx: Document tdx failure_inject sysfs parameters (Andi Kleen)
  - x86/tdx: Add trace point for tdx fuzzer (Andi Kleen)
  - x86/tdx: Add error injection for TDCALLs (Andi Kleen)
  - x86/tdx: Basic TDCALL fuzzing support (Andi Kleen)
  - random: Add prandom_u32_max_state (Andi Kleen)
  - mm/vmstat: Add counter for memory accepting (Kirill A. Shutemov)
  - x86/tdx: Disable hyperv paravirtualization until properly enabled (Andi Kleen)
  - x86/tdx: Enable direct iomap MMIO optimizations (Andi Kleen)
  - iomap: Add support for indirect MMIO (Andi Kleen)
  - swiotlb: allocate memory in a cache-friendly way (Chao Gao)
  - swiotlb: use bitmap to track free slots (Chao Gao)
  - x86/tdx: Use direct paravirt call for wrmsrl (Andi Kleen)
  - x86/tdx/paravirt: Move wrmsrl outside PARAVIRT_XXL (Andi Kleen)
  - x86/tdx: Make RDRAND/RDSEED loop forever (Andi Kleen)
  - x86/tdx/kvm: Only support trusted KVM CPUIDs (Andi Kleen)
  - x86/tdx: Add arch_has_restricted_memory_access for TDX (Andi Kleen)
  - virtio: Force only split mode with confidential guest (Andi Kleen)
  - random: Force trusting CPU RNG in TDX (Andi Kleen)
  - x86/tdx: Disable CQM in guest (Andi Kleen)
  - x86/tdx: Use CPUID 0x15 to get early TSC frequency (Andi Kleen)
  - virtio 9p: Fix an overflow (Andi Kleen)
  - virtio console: Harden port adding (Andi Kleen)
  - tdx: Disable ASPM with device filter (Andi Kleen)
  - tdx: Disable PCIE features with device filter (Andi Kleen)
  - tdx: Disable SRIOV with device filter (Andi Kleen)
  - x86/tdx: Enable panic_on_oops by default in TDX (Andi Kleen)
  - x86/tdx: Disable X86_FEATURE_TME,X86_FEATURE_APERFMPERF Capability (Andi Kleen)
  - x86/tdx: Disable X86_FEATURE_MTRR Capability (Andi Kleen)
  - x86/tdx: Disable X86_FEATURE_MCE Capability (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Block Xen initialization in TDX (Andi Kleen)
  - x86/tdx: Mark the TSC in TDs reliable (Andi Kleen)
  - clocksource/acpi_pm: Disable in TDX (Andi Kleen)
  - x86/tdx: Disable kvmclock in TDX (Andi Kleen)
  - x86/tdx: Disable enhanced PCI parsing for TDX (Andi Kleen)
  - pci: Don't run PCI quirks in TDX guest (Andi Kleen)
  - x86/tdx: Disable MMCONF for TDX guest (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Disable early PCI in TDX (Andi Kleen)
  - x86/tdx: Avoid early broadcom workaround when early PCI is disabled (Andi Kleen)
  - x86/tdx: Disable AMD northbridges (Andi Kleen)
  - x86/tdx: Disable split lock enabling for Sapphire Rapids (Andi Kleen)
  - virtio console: Harden multiport against invalid host input (Andi Kleen)
  - iomap: Mark ioremap shared when the device is authorized (Andi Kleen)
  - PCI: Mark MSI data shared if device was authorized (Andi Kleen)
  - x86/tdx: Implement ioremap_driver_hardened for x86 (Andi Kleen)
  - asm/io.h: Add ioremap_driver_hardening (Andi Kleen)
  - x86/tdx: Implement port I/O filtering (Kirill A. Shutemov)
  - x86/tdx: Add tdx_debug_enabled() interface (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add command line option to disable TDX guest filter support (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add command line option to override device allow list (Kuppuswamy Sathyanarayanan)
  - PCI: Initialize authorized attribute for confidential guest (Kuppuswamy Sathyanarayanan)
  - virtio: Initialize authorized attribute for confidential guest (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add device filter support for x86 TDX guest platform (Kuppuswamy Sathyanarayanan)
  - driver core: Allow arch to initialize the authorized attribute (Kuppuswamy Sathyanarayanan)
  - driver core: Add common support to skip probe for un-authorized devices (Kuppuswamy Sathyanarayanan)
  - driver core: Move the "authorized" attribute from USB/Thunderbolt to core (Kuppuswamy Sathyanarayanan)
  - platform/x86: intel_tdx_attest: Add TDX Guest attestation interface driver (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add TDX Guest event notify interrupt vector support (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add SetupEventNotifyInterrupt TDX hypercall support (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add GetQuote TDX hypercall support (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add TDREPORT TDX Module call support (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add option to override prot values (Andi Kleen)
  - Add taint flag for TDX overrides (Andi Kleen)
  - x86/tdx: Expose TDX Guest #VE count in /proc/interrupts (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add #VE tracepoint (Sean Christopherson)
  - ACPI/table: Print MADT Wake table information (Kuppuswamy Sathyanarayanan)
  - x86/split_lock: Fix the split lock #AC handling when running as guest (Xiaoyao Li)
  - x86/tdx: Forcefully disable legacy PIC for TDX guests (Sean Christopherson)
  - x86/tdx: Handle MWAIT and MONITOR (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Panic on #VE due to access to unaccepted memory (Kirill A. Shutemov)
  - x86/tdx: Unaccepted memory support (Kirill A. Shutemov)
  - x86/mm: Provide helpers for unaccepted memory (Kirill A. Shutemov)
  - x86/mm: Reserve unaccepted memory bitmap (Kirill A. Shutemov)
  - x86/boot/compressed: Handle unaccepted memory (Kirill A. Shutemov)
  - efi/x86: Implement support for unaccepted memory (Kirill A. Shutemov)
  - efi/x86: Get full memory map in allocate_e820() (Kirill A. Shutemov)
  - mm: Add support for unaccepted memory (Kirill A. Shutemov)
  - [REVERTME] x86/tdx: go directly to 64bit mode on APs (Andi Kleen)
  - [REVERTME] x86: tdx: skip the trampoline for TDX guest (Xiaoyao Li)
  - [REVERTME] x86/tdx: Add config options for platform fixes (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Warn about unexpected WBINVD (Kirill A. Shutemov)
  - anolis: add default configs for Anolis OS (Shile Zhang)


author: Qiao Ma <mqaio@linux.alibaba.com> [5.19.0-1.an23]
changelog:
  - tools/tdx: Adjust ioctl data structure for sample attestation user app (zhiminghufighting)
  - platform/x86: intel_tdx_attest: adjust tdx get quote structure (zhiminghufighting)
  - tdx: fix hang issue caused by kernel rebased to 5.19 (zhiminghufighting)


author: Qiao Ma <mqaio@linux.alibaba.com> [5.19.0-2_rc1.an23]
changelog:
  - configs: refresh the ANCK default configs (Qiao Ma)
  - anolis: driver core: A fix for wrong reference to the "authorized" attribute of core (Artie Ding)
  - anolis: configs: enable SQUASHFS_ZSTD for debug kernel (Yuanhe Shu)
  - anolis: configs: enable SQUASHFS_ZSTD (Yuanhe Shu)


author: Qiao Ma <mqaio@linux.alibaba.com> [5.19.0-2.2.an23]
changelog:
  - kbuild: Add skip_encoding_btf_enum64 option to pahole (Martin Rodriguez Reboredo)
  - tools bpftool: Don't display disassembler-four-args feature test (Andres Freund)
  - tools bpftool: Fix compilation error with new binutils (Andres Freund)
  - tools bpf_jit_disasm: Don't display disassembler-four-args feature test (Andres Freund)
  - tools bpf_jit_disasm: Fix compilation error with new binutils (Andres Freund)
  - tools perf: Fix compilation error with new binutils (Andres Freund)
  - tools include: add dis-asm-compat.h to handle version differences (Andres Freund)
  - tools build: Don't display disassembler-four-args feature test (Andres Freund)
  - tools build: Add feature test for init_disassemble_info API changes (Andres Freund)


author: Shile Zhang <shile.zhang@linux.alibaba.com> [5.16.0-1_rc1.an23]
changelog:
  - libsubcmd: Fix use-after-free for realloc(..., 0) (Kees Cook)
  - objtool: Fix truncated string warning (Sergei Trofimovich)
  - swiotlb: Add swiotlb bounce buffer remap function for HV IVM (Tianyu Lan)
  - x86/sev: Move common memory encryption code to mem_encrypt.c (Kirill A. Shutemov)
  - x86/sev: Rename mem_encrypt.c to mem_encrypt_amd.c (Kuppuswamy Sathyanarayanan)
  - x86/sev: Use CC_ATTR attribute to generalize string I/O unroll (Kuppuswamy Sathyanarayanan)
  - x86/sev-es: Use insn_decode_mmio() for MMIO implementation (Kirill A. Shutemov)
  - x86/insn-eval: Introduce insn_decode_mmio() (Kirill A. Shutemov)
  - x86/insn-eval: Introduce insn_get_modrm_reg_ptr() (Kirill A. Shutemov)
  - x86/insn-eval: Handle insn_get_opcode() failure (Kirill A. Shutemov)


author: Shile Zhang <shile.zhang@linux.alibaba.com> [5.16.0-1_rc2.an23]
changelog:
  - x86/tdx: Add option to override prot values (Andi Kleen)
  - Add taint flag for TDX overrides (Andi Kleen)
  - x86/tdx: Expose TDX Guest #VE count in /proc/interrupts (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add TDCALL tracepoint (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Add #VE tracepoint (Sean Christopherson)
  - ACPI/table: Print MADT Wake table information (Kuppuswamy Sathyanarayanan)
  - x86/split_lock: Fix the split lock #AC handling when running as guest (Xiaoyao Li)
  - x86/tdx: Forcefully disable legacy PIC for TDX guests (Sean Christopherson)
  - x86/tdx: Handle MWAIT and MONITOR (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Panic on #VE due to access to unaccepted memory (Kirill A. Shutemov)
  - x86/tdx: Unaccepted memory support (Kirill A. Shutemov)
  - x86/mm: Provide helpers for unaccepted memory (Kirill A. Shutemov)
  - x86/mm: Reserve unaccepted memory bitmap (Kirill A. Shutemov)
  - x86/boot/compressed: Handle unaccepted memory (Kirill A. Shutemov)
  - efi/x86: Implement support for unaccepted memory (Kirill A. Shutemov)
  - efi/x86: Get full memory map in allocate_e820() (Kirill A. Shutemov)
  - mm: Add support for unaccepted memory (Kirill A. Shutemov)
  - swiotlb: Do not zero buffer in set_memory_decrypted() (Kirill A. Shutemov)
  - [REVERTME] x86/acpi, x86/boot: Ignore timeout on Wakeup command response (Kirill A. Shutemov)
  - [REVERTME] x86/tdx: go directly to 64bit mode on APs (Andi Kleen)
  - [REVERTME] x86: tdx: skip the trampoline for TDX guest (Xiaoyao Li)
  - [REVERTME] x86/tdx: Add config options for platform fixes (Kuppuswamy Sathyanarayanan)
  - Documentation/x86: Document TDX kernel architecture (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Warn about unexpected WBINVD (Kirill A. Shutemov)
  - ACPICA: Avoid cache flush on TDX guest (Kirill A. Shutemov)
  - x86/tdx: ioapic: Add shared bit for IOAPIC base address (Isaku Yamahata)
  - x86/kvm: Use bounce buffers for TD guest (Kirill A. Shutemov)
  - x86/mm/cpa: Add support for TDX shared memory (Kirill A. Shutemov)
  - x86/tdx: Add helper to convert memory between shared and private (Kirill A. Shutemov)
  - x86/tdx: Make pages shared in ioremap() (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Exclude shared bit from __PHYSICAL_MASK (Kirill A. Shutemov)
  - x86/tdx: Get page shared bit info from the TDX module (Kirill A. Shutemov)
  - x86/topology: Disable CPU online/offline control for TDX guests (Kuppuswamy Sathyanarayanan)
  - x86/boot: Avoid #VE during boot for TDX platforms (Sean Christopherson)
  - x86/acpi, x86/boot: Add multiprocessor wake-up support (Kuppuswamy Sathyanarayanan)
  - x86/boot: Add a trampoline for booting APs via firmware handoff (Sean Christopherson)
  - x86/tdx: Wire up KVM hypercalls (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Early boot handling of port I/O (Andi Kleen)
  - x86/tdx: Add port I/O emulation (Kuppuswamy Sathyanarayanan)
  - x86/boot/compressed: Support TDX guest port I/O at decompression time (Kirill A. Shutemov)
  - x86/boot: Allow to hook up alternative port I/O helpers (Kirill A. Shutemov)
  - x86: Consolidate port I/O helpers (Kirill A. Shutemov)
  - x86/tdx: Detect TDX at early kernel decompression time (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Handle in-kernel MMIO (Kirill A. Shutemov)
  - x86/tdx: Handle CPUID via #VE (Kirill A. Shutemov)
  - x86/tdx: Add MSR support for TDX guests (Kirill A. Shutemov)
  - x86/tdx: Add HLT support for TDX guests (Kirill A. Shutemov)
  - x86/traps: Add #VE support for TDX guest (Kirill A. Shutemov)
  - x86/tdx: Add __tdx_module_call() and __tdx_hypercall() helper functions (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Extend the cc_platform_has() API to support TDX guests (Kuppuswamy Sathyanarayanan)
  - x86/tdx: Detect running as a TDX guest in early boot (Kuppuswamy Sathyanarayanan)


author: Qiao Ma <mqaio@linux.alibaba.com> [5.19.0-2.an23]
changelog:
  * Sun Oct 09 2022 Qiao Ma <mqaio@linux.alibaba.com> [5.19.0-2_rc1.an23]
  - configs: refresh the ANCK default configs (Qiao Ma)
  - anolis: driver core: A fix for wrong reference to the "authorized" attribute of core (Artie Ding)
  - anolis: configs: enable SQUASHFS_ZSTD for debug kernel (Yuanhe Shu)
  - anolis: configs: enable SQUASHFS_ZSTD (Yuanhe Shu)


