From nobody Tue Feb 01 22:29:09 2022 X-Original-To: freebsd-announce@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 262B319A6A14 for ; Tue, 1 Feb 2022 22:29:09 +0000 (UTC) (envelope-from security-advisories@freebsd.org) Received: from freefall.freebsd.org (freefall.freebsd.org [96.47.72.132]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "freefall.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4JpKNP0ccgz3GWN; Tue, 1 Feb 2022 22:29:09 +0000 (UTC) (envelope-from security-advisories@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1643754549; h=from:from:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc; bh=xZQKsAt6Yvy7oU6MX+ZEtZ8plJe5oYhlO2fKwCPPfmc=; b=WwR2nzOLqdIz523TkZEv4Arw/N/mtm/TZQcdVYcmS9YgxZRjv6ITxaYVxE71mr9jp1gOKj BvkXIYGWNjsLUOQmhsbRgSuBSeGkaLGSS8hsq1O30CZvBag98npCdWJajpIKg24dG1V6kO wPMKKAjz/sZ2xaLoMz5NhdsiLlV81cxreAyqBjfZr1M/cZV1CAXkguDIvoe/HB9p3TKE2h +cRocccYWFSrmiqiaElweU6cdemtGPatuz/bS0vtLubqNMFU/0v5MXdeV3gBLk1Z9PS6pQ gcQUTZO4BJpr0VKVS9SYmuHQVueeu11YufcqikAM3JaTj081dGLJmzAMWSr51g== Received: by freefall.freebsd.org (Postfix, from userid 945) id 0DB3714FD1; Tue, 1 Feb 2022 22:29:09 +0000 (UTC) From: FreeBSD Errata Notices To: FreeBSD Errata Notices Subject: FreeBSD Errata Notice FreeBSD-EN-22:08.i386 Reply-To: freebsd-stable@freebsd.org Precedence: bulk Message-Id: <20220201222909.0DB3714FD1@freefall.freebsd.org> Date: Tue, 1 Feb 2022 22:29:09 +0000 (UTC) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1643754549; h=from:from:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc; bh=xZQKsAt6Yvy7oU6MX+ZEtZ8plJe5oYhlO2fKwCPPfmc=; b=yCLdE4OozBCIp2b9ttRy5+amT4b/GJQU4Tj7+euC/wZwQc8HwANdWU6aAljzgpfS18n+3O Yiht1HJnQWkIH3/QHPT01u9K4RY/6Yp/tV0z93FYZNLuCaYzDaPv2WZgpcusdc/NK0OS0P ocJXr8OLuacwWQD3vIbKZHEjAl/X8CfAAq71w1JYYWc8EbxR18cwSVvrHtpdLyRF2iKm+M +yYwvtHxaiPWd3AlQrQbeBpx6xIAP7ARZ9mngBpwHByPMXNmhYKpX1reA+Z9IPb+tWZU0W jO20tWhqKCMy5AM9x8xAU5mgvzdwMuJM4RIvl7w7CCg5e9VjPsgMz8QZuz8zjw== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1643754549; a=rsa-sha256; cv=none; b=O96ZD2OAQUBCQYM1bBiEARmR5eEmfj5PS5pAElYsuU+g/vSoiYr+6xirQkbl7iiAH9BYu1 jtg75He/7OhYdH1W4yNzTFGXFqZuZFXUw4iIN3sunkhlQWwXaPnLbqC5SYaFbvOGGOlv2U yJ8XXtKB1mPiJl7p8YtDrCgsHTuxQ3Xqb5L/tKaAq17KjZDX2C5kZlnfpiAqZ3RCoX/nq8 SPcQ0ThqDIe6RQ7hn8ukjIgvQqCsbDCN5plBn+efGPLHOZCsFvQyFEEI8cedIiidBSv0JH yqMaM/uv2kTSlEwhE681Mea8b9ysCYm+z/lAnv4Q6VudVpiLfMKXuiFU7kgJ+w== ARC-Authentication-Results: i=1; mx1.freebsd.org; none X-ThisMailContainsUnwantedMimeParts: N List-Id: Project Announcements [moderated] List-Archive: https://lists.freebsd.org/archives/freebsd-announce List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-announce@freebsd.org X-BeenThere: freebsd-announce@freebsd.org -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-EN-22:08.i386 Errata Notice The FreeBSD Project Topic: Regression in i386 TLB invalidation logic Category: core Module: i386 Announced: 2022-02-01 Affects: FreeBSD 12.2 and 12.3 Corrected: 2022-01-25 10:40:16 UTC (stable/12, 12.3-STABLE) 2022-02-01 19:13:44 UTC (releng/12.3, 12.3-RELEASE-p2) 2022-02-01 19:13:24 UTC (releng/12.2, 12.2-RELEASE-p13) For general information regarding FreeBSD Errata Notices and Security Advisories, including descriptions of the fields above, security branches, and the following sections, please visit . I. Background The FreeBSD/i386 port supports running FreeBSD on 32-bit Intel and AMD CPUs. On the i386 platform, the operating system kernel is responsible for invalidating per-CPU TLBs (translation lookaside buffer) when virtual memory mappings are updated. II. Problem Description The patch which was released as EN-22:04.pcid introduced a regression affecting FreeBSD 12.2 and 12.3. This regression introduced a bug in the i386 platform's TLB invalidation logic. III. Impact The regression causes kernel panics under multi-core CPU load. IV. Workaround No workaround is available. Single-core systems are not affected. V. Solution Upgrade your system to a supported FreeBSD stable or release / security branch (releng) dated after the correction date and reboot. Perform one of the following: 1) To update your system via a binary patch: Systems running a RELEASE version of FreeBSD on the amd64, i386, or (on FreeBSD 13 and later) arm64 platforms can be updated via the freebsd-update(8) utility: # freebsd-update fetch # freebsd-update install # shutdown -r +10min "Rebooting for an errata update" 2) To update your system via a source code patch: The following patches have been verified to apply to the applicable FreeBSD release branches. a) Download the relevant patch from the location below, and verify the detached PGP signature using your PGP utility. # fetch https://security.FreeBSD.org/patches/EN-22:08/i386.patch # fetch https://security.FreeBSD.org/patches/EN-22:08/i386.patch.asc # gpg --verify i386.patch.asc b) Apply the patch. Execute the following commands as root: # cd /usr/src # patch < /path/to/patch c) Recompile your kernel as described in and reboot the system. VI. Correction details This issue is corrected by the corresponding Git commit hash or Subversion revision number in the following stable and release branches: Branch/path Hash Revision - ------------------------------------------------------------------------- stable/12/ r371519 releng/12.3/ r371536 releng/12.2/ r371534 - ------------------------------------------------------------------------- Run the following command to see which files were modified by a particular revision, replacing NNNNNN with the revision number: # svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base Or visit the following URL, replacing NNNNNN with the revision number: VII. References The latest revision of this advisory is available at -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAmH5kz4ACgkQ05eS9J6n 5cJVsQ/+KFXts6jb5Nrm2qbZm38x6af3zwiN/v39cz5DumOvIC0OFTiaeaWU91Dc bytpGp6KIuOK6pYGIP4NrZW5L0pow3mwV/nxpZLATR4QTCiBydOgKekjaAiU6rxX vX/MS2rm6Th6EcBIw1dept1up73qM2FoM8DC+/e9HlCtqyDqfgBLqbMuSymk0fz+ Lh1Zj9ywS1sY+fn7eeAq7RmlTpuQBnlZEllDhf9paC5JWR4fu23XQeZHUUIuqOkF bnPE7hDaXdEvU0zY4b57vzTT7MQx7vCRBdCsk086s2dvInbeqTDEYSk5+R/kqsgR 5+xijYPGb9D9J0tMaETGQp0vLkDI4xJpkX8AhZ8JBIjxyKxKI/VY+KOwX6CfUmon tgUeo8EYkliLBUtq31L7MLMzzCN1mjA05h78uBvDjmm9ATv8IAmKlSNestIzfl4j Rw3oYpQU/TsQSxUMnReRth781bORmJdDnEDAvjqGKGOT9VkUJ/3chv13EHJX88/R No1DYB3LM4MaGf1c7paB9ahJOnV8Z5bk5j3nqLhys2asEvGcWvuWW722LO/wcREL L4GsQmEbUerTeh8Q5RE147ZTYOnGb5eIQi5McPRozdNQBLjJGUOEhWeSBdBbDgch 8cfYw3UdyNst80puq6t/4Wft4uhvkuNYKiaY9MKNYON/YHrhZ78= =TqoX -----END PGP SIGNATURE-----