From nobody Tue Feb 01 22:10:13 2022 X-Original-To: freebsd-announce@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 76070198A7BD for ; Tue, 1 Feb 2022 22:10:13 +0000 (UTC) (envelope-from security-advisories@freebsd.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2610:1c1:1:6074::16:84]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "freefall.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4JpJyY2wK5z4sS1; Tue, 1 Feb 2022 22:10:13 +0000 (UTC) (envelope-from security-advisories@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1643753413; h=from:from:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc; bh=xZQKsAt6Yvy7oU6MX+ZEtZ8plJe5oYhlO2fKwCPPfmc=; b=sYDA7ySJLwpfXlz+ui9AOdeyjn4Kg8+4jxfOUiVlUbvKk8d0H7THztYVB7Dyx4fM4rjxSs e12gqPXqxrE4NhENnhms5dV/KjmxATkU4+IdNt8LhB8rHzI33IdKETgQ1UOi4v5iNHsdDX 7CqNCfxVSF6oPGX7va3mE52wjafUv1K7FuL9a0vUmcuQ94hS5oIfZbNGIlf6AV4pHw/tWu yBWOEEzn1QVZh9slGGyqZVEw5opaRr0UjOnXRBNx6qBueW4fyZqcytGBW39DWV3p9++gsw 7SRzA6UNzNGKv843KDKHt4o8ppT3us3w6qcUC4fdVzXpApXeTFw/BatztgbIng== Received: by freefall.freebsd.org (Postfix, from userid 945) id 5098B15182; Tue, 1 Feb 2022 22:10:13 +0000 (UTC) From: FreeBSD Errata Notices To: FreeBSD Errata Notices Subject: FreeBSD Errata Notice FreeBSD-EN-22:08.i386 Reply-To: freebsd-stable@freebsd.org Precedence: bulk Message-Id: <20220201221013.5098B15182@freefall.freebsd.org> Date: Tue, 1 Feb 2022 22:10:13 +0000 (UTC) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1643753413; h=from:from:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc; bh=xZQKsAt6Yvy7oU6MX+ZEtZ8plJe5oYhlO2fKwCPPfmc=; b=b6/JtQf39WsuKlgp312DY0F3r4ItxkPo17T8fTzUUuBbIGQ8DZb+1DV/1XzH3527dno2od ZC8OjPGhXJ00FeY8CRqf6VHTKE4WNYE2X92/vYOBDmW82SUA2FD9SFkG9ukZ8WUvkYjJ01 3w47654CBaT3HOwnI8OJqDWcHtXMzcnQUd0azfcwjvgFDEankefBrvxW1OPs2PLh3bdFw+ 7X1ZftN3tTCJGhMWA7yjDHxapxTZo5Ub2Gonfh4lQJKsSNjDjGGqDsJ4ij8AOLLNUdiIOU q8TQptrHLCxCBV6I7kHoUz+QST/vbH2YYED9PVjs7PPwxbhnwRUeXHNslhtNdA== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1643753413; a=rsa-sha256; cv=none; b=p6qj8dQMuJ1mmxqeTNgtpqm+ErwsBP7Iq5/WVpEldvd7sVTXTrCQ6TIhVaC6b5dfEDwIn3 uJxs/2Z2HuEx4A6P0BimfrhBaQYezMl2OLt+sxbxFO5BQMQG2pkjMm7QC3wElO2ILkya6Y T15MgkWA5UvbqGgcy3GseY00oF0a+lUk2DWl7jK295GNgVAECNl9ucmGHX/amp/are0HaV v4GovM5r7ckpRZ7r/T1BJtmhGCqnEtMXh2kejZNIDFhoURT6KbU2xNN5bJZ4K/VdNWYP+U vD70A7LRcNvpR8fCueG5SYerEw00UWoMNVuASuvslR0Eeh0FVrXDXxNpnTcx0A== ARC-Authentication-Results: i=1; mx1.freebsd.org; none X-ThisMailContainsUnwantedMimeParts: N List-Id: Project Announcements [moderated] List-Archive: https://lists.freebsd.org/archives/freebsd-announce List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-announce@freebsd.org X-BeenThere: freebsd-announce@freebsd.org -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-EN-22:08.i386 Errata Notice The FreeBSD Project Topic: Regression in i386 TLB invalidation logic Category: core Module: i386 Announced: 2022-02-01 Affects: FreeBSD 12.2 and 12.3 Corrected: 2022-01-25 10:40:16 UTC (stable/12, 12.3-STABLE) 2022-02-01 19:13:44 UTC (releng/12.3, 12.3-RELEASE-p2) 2022-02-01 19:13:24 UTC (releng/12.2, 12.2-RELEASE-p13) For general information regarding FreeBSD Errata Notices and Security Advisories, including descriptions of the fields above, security branches, and the following sections, please visit . I. Background The FreeBSD/i386 port supports running FreeBSD on 32-bit Intel and AMD CPUs. On the i386 platform, the operating system kernel is responsible for invalidating per-CPU TLBs (translation lookaside buffer) when virtual memory mappings are updated. II. Problem Description The patch which was released as EN-22:04.pcid introduced a regression affecting FreeBSD 12.2 and 12.3. This regression introduced a bug in the i386 platform's TLB invalidation logic. III. Impact The regression causes kernel panics under multi-core CPU load. IV. Workaround No workaround is available. Single-core systems are not affected. V. Solution Upgrade your system to a supported FreeBSD stable or release / security branch (releng) dated after the correction date and reboot. Perform one of the following: 1) To update your system via a binary patch: Systems running a RELEASE version of FreeBSD on the amd64, i386, or (on FreeBSD 13 and later) arm64 platforms can be updated via the freebsd-update(8) utility: # freebsd-update fetch # freebsd-update install # shutdown -r +10min "Rebooting for an errata update" 2) To update your system via a source code patch: The following patches have been verified to apply to the applicable FreeBSD release branches. a) Download the relevant patch from the location below, and verify the detached PGP signature using your PGP utility. # fetch https://security.FreeBSD.org/patches/EN-22:08/i386.patch # fetch https://security.FreeBSD.org/patches/EN-22:08/i386.patch.asc # gpg --verify i386.patch.asc b) Apply the patch. Execute the following commands as root: # cd /usr/src # patch < /path/to/patch c) Recompile your kernel as described in and reboot the system. VI. Correction details This issue is corrected by the corresponding Git commit hash or Subversion revision number in the following stable and release branches: Branch/path Hash Revision - ------------------------------------------------------------------------- stable/12/ r371519 releng/12.3/ r371536 releng/12.2/ r371534 - ------------------------------------------------------------------------- Run the following command to see which files were modified by a particular revision, replacing NNNNNN with the revision number: # svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base Or visit the following URL, replacing NNNNNN with the revision number: VII. References The latest revision of this advisory is available at -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAmH5kz4ACgkQ05eS9J6n 5cJVsQ/+KFXts6jb5Nrm2qbZm38x6af3zwiN/v39cz5DumOvIC0OFTiaeaWU91Dc bytpGp6KIuOK6pYGIP4NrZW5L0pow3mwV/nxpZLATR4QTCiBydOgKekjaAiU6rxX vX/MS2rm6Th6EcBIw1dept1up73qM2FoM8DC+/e9HlCtqyDqfgBLqbMuSymk0fz+ Lh1Zj9ywS1sY+fn7eeAq7RmlTpuQBnlZEllDhf9paC5JWR4fu23XQeZHUUIuqOkF bnPE7hDaXdEvU0zY4b57vzTT7MQx7vCRBdCsk086s2dvInbeqTDEYSk5+R/kqsgR 5+xijYPGb9D9J0tMaETGQp0vLkDI4xJpkX8AhZ8JBIjxyKxKI/VY+KOwX6CfUmon tgUeo8EYkliLBUtq31L7MLMzzCN1mjA05h78uBvDjmm9ATv8IAmKlSNestIzfl4j Rw3oYpQU/TsQSxUMnReRth781bORmJdDnEDAvjqGKGOT9VkUJ/3chv13EHJX88/R No1DYB3LM4MaGf1c7paB9ahJOnV8Z5bk5j3nqLhys2asEvGcWvuWW722LO/wcREL L4GsQmEbUerTeh8Q5RE147ZTYOnGb5eIQi5McPRozdNQBLjJGUOEhWeSBdBbDgch 8cfYw3UdyNst80puq6t/4Wft4uhvkuNYKiaY9MKNYON/YHrhZ78= =TqoX -----END PGP SIGNATURE-----