[Deepin-Kernel-SIG] [linux 6.6-y] [Fromlist] [Security] [ARM] 添加ARM-CCA机密计算特性支持#1319

Open

Avenger-285714 wants to merge 83 commits intodeepin-community:linux-6.6.yfrom

Avenger-285714:linux-6.6.y

Commits on Nov 23, 2025

arm64: mm: Add top-level dispatcher for internal mem_encrypt API

willdeacon
authored and
WangYuli
committed
arm64: mm: Add confidential computing hook to ioremap_prot()

willdeacon
authored and
WangYuli
committed
arm64: rsi: Add RSI definitions

Suzuki K Poulose
authored and
WangYuli
committed
arm64: Detect if in a realm and set RIPAS RAM

Suzuki K Poulose
authored and
WangYuli
committed
arm64: realm: Query IPA size from the RMM

Steven Price
authored and
WangYuli
committed
arm64: rsi: Add support for checking whether an MMIO is protected

Suzuki K Poulose
authored and
WangYuli
committed
arm64: rsi: Map unprotected MMIO as decrypted

Suzuki K Poulose
authored and
WangYuli
committed
efi: arm64: Map Device with Prot Shared

Suzuki K Poulose
authored and
WangYuli
committed
arm64: Enforce bounce buffers for realm DMA

Steven Price
authored and
WangYuli
committed
arm64: mm: Avoid TLBI when marking pages as valid

Steven Price
authored and
WangYuli
committed
arm64: Enable memory encrypt for Realms

Suzuki K Poulose
authored and
WangYuli
committed
irqchip/gic-v3-its: Share ITS tables with a non-trusted hypervisor

Steven Price
authored and
WangYuli
committed
irqchip/gic-v3-its: Fix over allocation in itt_alloc_pool()

Steven Price
authored and
WangYuli
committed
irqchip/gic-v3-its: Rely on genpool alignment

Steven Price
authored and
WangYuli
committed
jump_label,module: Don't alloc static_key_mod for __ro_after_init keys

Peter Zijlstra
authored and
WangYuli
committed
parisc: Delay write-protection until mark_rodata_ro() call

hdeller
authored and
WangYuli
committed
arm64: realm: ioremap: Allow mapping memory as encrypted

Suzuki K Poulose
authored and
WangYuli
committed
rme: make sure realm guest map memory in page granularity

Yiwei Zhuang
authored and
WangYuli
committed
dma: Fix encryption bit clearing for dma_to_phys

Suzuki K Poulose
authored and
WangYuli
committed
dma: Introduce generic dma_addr_*crypted helpers

Suzuki K Poulose
authored and
WangYuli
committed
arm64: realm: Use aliased addresses for device DMA to shared buffers

Suzuki K Poulose
authored and
WangYuli
committed
virt: coco: Add a coco/Makefile and coco/Kconfig

djbw
authored and
WangYuli
committed
configfs-tsm: Introduce a shared ABI for attestation reports

djbw
authored and
WangYuli
committed
mm/slab: Add __free() support for kvfree

djbw
authored and
WangYuli
committed
virt: arm-cca-guest: TSM_REPORT support for realms

samimujawar
authored and
WangYuli
committed
arm64: Document Arm Confidential Compute

Steven Price
authored and
WangYuli
committed
configfs-tsm-report: Fix NULL dereference of tsm_ops

djbw
authored and
WangYuli
committed
MAINTAINERS: Add CCA and pKVM CoCO guest support to the ARM64 entry

willdeacon
authored and
WangYuli
committed
KVM: arm64: PMU: Add a helper to read a vCPU's PMCR_EL0

reijiw-kvm
authored and
WangYuli
committed
arm: perf/kvm: Use GENMASK for ARMV8_PMU_PMCR_N

James-A-Clark
authored and
WangYuli
committed
kvm: arm64: Include kvm_emulate.h in kvm/arm_psci.h

Suzuki K Poulose
authored and
WangYuli
committed
arm64: RME: Handle Granule Protection Faults (GPFs)

Steven Price
authored and
WangYuli
committed
arm64: RME: Add SMC definitions for calling the RMM

Steven Price
authored and
WangYuli
committed
arm64: RME: Add wrappers for RMI calls

Steven Price
authored and
WangYuli
committed
arm64: RME: Check for RME support at KVM init

Steven Price
authored and
WangYuli
committed
arm64: RME: Define the user ABI

Steven Price
authored and
WangYuli
committed
arm64: RME: ioctls to create and configure realms

Steven Price
authored and
WangYuli
committed
kvm: arm64: Don't expose debug capabilities for realm guests

Suzuki K Poulose
authored and
WangYuli
committed
KVM: arm64: Allow passing machine type in KVM creation

Steven Price
authored and
WangYuli
committed
arm64: RME: RTT tear down

Steven Price
authored and
WangYuli
committed
KVM: arm64: Add generic check for system-supported vCPU features

oupton
authored and
WangYuli
committed
arm64: RME: Allocate/free RECs to match vCPUs

Steven Price
authored and
WangYuli
committed
KVM: arm64: vgic: Provide helper for number of list registers

Steven Price
authored and
WangYuli
committed
KVM: arm64: Force GICv3 trap activation when no irqchip is configured on VHE

Marc Zyngier
authored and
WangYuli
committed
arm64: RME: Support for the VGIC in realms

Steven Price
authored and
WangYuli
committed
KVM: arm64: Support timers in realm RECs

Steven Price
authored and
WangYuli
committed
KVM: Add member to struct kvm_gfn_range to indicate private/shared

yamahata
authored and
WangYuli
committed
arm64: RME: Allow VMM to set RIPAS

Steven Price
authored and
WangYuli
committed
arm64: RME: Handle realm enter/exit

Steven Price
authored and
WangYuli
committed
arm64: RME: Handle RMI_EXIT_RIPAS_CHANGE

Steven Price
authored and
WangYuli
committed
KVM: arm64: Handle realm MMIO emulation

Steven Price
authored and
WangYuli
committed
arm64: RME: Allow populating initial contents

Steven Price
authored and
WangYuli
committed

Commits on Dec 5, 2025

rme: populate guest memory region without guest_memfd

Steven Price
authored and
Avenger-285714
committed
KVM: arm64: Move pagetable definitions to common header

Sebastian Ene
authored and
Avenger-285714
committed
arm64: RME: Runtime faulting of memory

Steven Price
authored and
Avenger-285714
committed
KVM: arm64: Handle realm VCPU load

Steven Price
authored and
Avenger-285714
committed
KVM: arm64: Validate register access for a Realm VM

Steven Price
authored and
Avenger-285714
committed
KVM: arm64: Handle Realm PSCI requests

Steven Price
authored and
Avenger-285714
committed
KVM: arm64: WARN on injected undef exceptions

Steven Price
authored and
Avenger-285714
committed
arm64: Don't expose stolen time for realm guests

Steven Price
authored and
Avenger-285714
committed
arm64: RME: allow userspace to inject aborts

jgouly
authored and
Avenger-285714
committed
arm64: RME: support RSI_HOST_CALL

jgouly
authored and
Avenger-285714
committed
arm64: RME: Allow checking SVE on VM instance

Suzuki K Poulose
authored and
Avenger-285714
committed
arm64: RME: Always use 4k pages for realms

Steven Price
authored and
Avenger-285714
committed
arm64: RME: Prevent Device mappings for Realms

Steven Price
authored and
Avenger-285714
committed
arm_pmu: Provide a mechanism for disabling the physical IRQ

Steven Price
authored and
Avenger-285714
committed
KVM: arm64: PMU: Set PMCR_EL0.N for vCPU based on the associated PMU

reijiw-kvm
authored and
Avenger-285714
committed
KVM: arm64: PMU: Allow userspace to limit PMCR_EL0.N for the guest

reijiw-kvm
authored and
Avenger-285714
committed
KVM: arm64: PMU: Introduce helpers to set the guest's PMU

reijiw-kvm
authored and
Avenger-285714
committed
arm64: rme: Enable PMU support with a realm guest

Steven Price
authored and
Avenger-285714
committed
arm64: RME: Hide KVM_CAP_READONLY_MEM for realm guests

Steven Price
authored and
Avenger-285714
committed
arm64: RME: Propagate number of breakpoints and watchpoints to userspace

jpbrucker
authored and
Avenger-285714
committed
arm64: RME: Set breakpoint parameters through SET_ONE_REG

jpbrucker
authored and
Avenger-285714
committed
arm64: RME: Initialize PMCR.N with number counter supported by RMM

jpbrucker
authored and
Avenger-285714
committed
arm64: RME: Propagate max SVE vector length from RMM

jpbrucker
authored and
Avenger-285714
committed
rm64: RME: Configure max SVE vector length for a Realm

jpbrucker
authored and
Avenger-285714
committed
arm64: RME: Provide register list for unfinalized RME RECs

jpbrucker
authored and
Avenger-285714
committed
arm64: RME: Provide accurate register list

jpbrucker
authored and
Avenger-285714
committed
KVM: arm64: Expose KVM_ARM_VCPU_REC to user space

Steven Price
authored and
Avenger-285714
committed
KVM: arm64: Allow activating realms

Steven Price
authored and
Avenger-285714
committed
KVM: arm64: Select default PMU in KVM_ARM_VCPU_INIT handler

reijiw-kvm
authored and
Avenger-285714
committed
arm64: RME: Introduce kvm_rec_pre_enter() called before entering an atomic section

Steven Price
authored and
Avenger-285714
committed
arm64: RME: handle RIPAS changes before kvm_rec_enter

Steven Price
authored and
Avenger-285714
committed