opnsense-src/sys
Mark Johnston 53a2985c43 pkru: Fix handling of 1GB largepage mappings
pmap_pkru_update_range() did not handle the case where a PDPE has PG_PS
set.  More generally, the SET_PKRU and CLEAR_PKRU sysarch
implementations did not check whether the request covers a "boundary" vm
map entry.  Fix this, add the missing PG_PS test, and add some tests.

Approved by:	so
Security:	FreeBSD-SA-26:11.amd64
Security:	CVE-2026-6386
Reported by:	Nicholas Carlini <npc@anthropic.com>
Reviewed by:	kib, alc
Differential Revision:	https://reviews.freebsd.org/D56184
2026-04-29 22:12:56 +02:00
..
amd64 pkru: Fix handling of 1GB largepage mappings 2026-04-29 22:12:56 +02:00
arm Avoid waiting on physical allocations that can't possibly be satisfied 2025-10-23 08:18:48 +02:00
arm64 arm64: Correctly align the SVE signal context 2026-01-28 07:36:19 +01:00
bsm New setcred() system call and associated MAC hooks 2025-04-03 21:31:03 +02:00
cam Internal scheduling priorities: Always use symbolic ones 2025-07-31 12:42:21 +02:00
cddl dtrace/arm64: Fix dtrace_gethrtime() 2025-04-02 15:14:37 +00:00
compat LinuxKPI: add supporting #includes 2026-04-08 15:25:05 +02:00
conf Add UPDATING entries and bump version 2026-03-26 08:04:53 +01:00
contrib qat: enable qat driver for 402xx device 2026-01-20 09:05:29 +01:00
crypto crypto: avoid warnings about too-long initializer strings 2026-01-10 08:57:55 +01:00
ddb ddb: Add sysctl flag CTLFLAG_TUN to loader tunable 2023-10-12 12:08:18 +08:00
dev e1000: Increase FC pause/refresh time on PCH2 and newer 2026-03-09 09:15:10 +01:00
dts add allwinner overlays for enabling additional USB ports 2024-02-17 16:15:10 +02:00
fs file: Add a fd flag with O_RESOLVE_BENEATH semantics 2026-02-24 19:22:09 +01:00
gdb sys: Remove $FreeBSD$: one-line .c pattern 2023-08-16 11:54:36 -06:00
geom sysctl(9): Ease exporting struct sizes; Discourage doing that 2025-05-13 14:41:33 +02:00
gnu sys: Remove $FreeBSD$: one-line .c pattern 2023-08-16 11:54:36 -06:00
i386 i386: Avoid registering overlapping vm_phys_seg entries 2025-04-15 02:25:24 +00:00
isa isa: Use a bus_child_deleted method to free ivars for children 2024-11-30 21:46:06 -05:00
kern tty: Avoid leaving dangling pointers in tty_drop_ctty() 2026-04-29 22:12:55 +02:00
kgssapi nfscl/kgssapi: Fix Kerberized NFS mounts to pNFS servers 2023-12-23 17:03:58 -08:00
libkern libkern: strdup.c, strndup.c: Prefer memcpy() over bcopy() 2025-03-03 22:56:34 +08:00
modules qat: enable qat driver for 402xx device 2026-01-20 09:05:29 +01:00
net if_types: Fix a typo in a source code comment 2026-04-08 15:24:26 +02:00
net80211 net80211: fix VHT160/80P80/80 chanwidth selection in the "40-" case 2026-04-08 15:24:45 +02:00
netgraph Internal scheduling priorities: Always use symbolic ones 2025-07-31 12:42:21 +02:00
netinet tcp: plug an mbuf leak 2026-03-26 08:04:46 +01:00
netinet6 icmp6: clear csum_flags on mbuf reuse 2026-02-24 10:11:30 +01:00
netipsec netipsec: Use proper prototype for SYSINIT functions 2026-02-18 13:12:52 +01:00
netlink netlink: Don't directly access ifnet members 2026-01-10 09:00:31 +01:00
netpfil pf: include all elements when hashing rules 2026-03-26 08:04:52 +01:00
netsmb kern: adopt the cr_gid macro for cr_groups[0] more widely 2026-01-20 08:27:09 +01:00
nfs sys: Remove $FreeBSD$: one-line .c pattern 2023-08-16 11:54:36 -06:00
nfsclient sys: Remove $FreeBSD$: one-line .h pattern 2023-08-16 11:54:18 -06:00
nfsserver sys: Remove $FreeBSD$: one-line .h pattern 2023-08-16 11:54:18 -06:00
nlm sys: Remove $FreeBSD$: one-line .c pattern 2023-08-16 11:54:36 -06:00
ofed ibcore: Mark write-only variables 2024-07-15 12:28:53 +00:00
opencrypto ktls: Remove the socket parameter to ktls_ocf_try() 2024-07-23 09:01:30 -04:00
powerpc powerpc: Always use BE tag in nexus_map_resource 2025-05-15 09:06:51 -04:00
riscv riscv: Fix handling of interrupts during kernel page faults 2025-04-29 00:44:01 +00:00
rpc rpcsec_gss: Fix a stack overflow in svc_rpc_gss_validate() 2026-03-26 08:04:47 +01:00
security kern: adopt the cr_gid macro for cr_groups[0] more widely 2026-01-20 08:27:09 +01:00
sys file: Add a fd flag with O_RESOLVE_BENEATH semantics 2026-02-24 19:22:09 +01:00
teken teken: fix style in teken_wcwidth.h 2023-10-21 17:28:35 +03:00
tests tests: Stop checking for failures from malloc(M_WAITOK) 2024-09-30 12:44:18 +08:00
tools vnode: Make the vop_vector reference a pointer to const 2024-12-03 01:02:10 +00:00
ufs kern: adopt the cr_gid macro for cr_groups[0] more widely 2026-01-20 08:27:09 +01:00
vm pkru: Fix handling of 1GB largepage mappings 2026-04-29 22:12:56 +02:00
x86 Add a new sysctl in order to diffrentiate UEFI architectures 2025-08-08 11:49:17 +02:00
xdr rpc: Fix the definition of xdr_void() 2024-11-05 01:05:26 +00:00
xen sys: Remove $FreeBSD$: one-line sh pattern 2023-08-16 11:54:58 -06:00
Makefile sys: Remove $FreeBSD$: one-line sh pattern 2023-08-16 11:54:58 -06:00
README.md sys/README.md: Add a section for documentation 2023-08-03 11:07:41 -03:00

FreeBSD Kernel Source:

This directory contains the source files and build glue that make up the FreeBSD kernel and its modules, including both original and contributed software.

Kernel configuration files are located in the conf/ subdirectory of each architecture. GENERIC is the configuration used in release builds. NOTES contains documentation of all possible entries. LINT is a compile-only configuration used to maximize build coverage and detect regressions.

Documentation:

Source code documentation is maintained in a set of man pages, under section 9. These pages are located in share/man/man9, from the top-level of the src tree. Consult intro(9) for an overview of existing pages.

Some additional high-level documentation of the kernel is maintained in the Architecture Handbook.

Source Roadmap:

Directory Description
amd64 AMD64 (64-bit x86) architecture support
arm 32-bit ARM architecture support
arm64 64-bit ARM (AArch64) architecture support
cam Common Access Method storage subsystem - cam(4) and ctl(4)
cddl CDDL-licensed optional sources such as DTrace
conf kernel build glue
compat Linux compatibility layer, FreeBSD 32-bit compatibility
contrib 3rd-party imported software such as OpenZFS
crypto crypto drivers
ddb interactive kernel debugger - ddb(4)
fs most filesystems, excluding UFS, NFS, and ZFS
dev device drivers and other arch independent code
gdb kernel remote GDB stub - gdb(4)
geom GEOM framework - geom(4)
i386 i386 (32-bit x86) architecture support
kern main part of the kernel
libkern libc-like and other support functions for kernel use
modules kernel module infrastructure
net core networking code
net80211 wireless networking (IEEE 802.11) - net80211(4)
netgraph graph-based networking subsystem - netgraph(4)
netinet IPv4 protocol implementation - inet(4)
netinet6 IPv6 protocol implementation - inet6(4)
netipsec IPsec protocol implementation - ipsec(4)
netpfil packet filters - ipfw(4), pf(4), and ipfilter(4)
opencrypto OpenCrypto framework - crypto(7)
powerpc PowerPC/POWER (32 and 64-bit) architecture support
riscv 64-bit RISC-V architecture support
security security facilities - audit(4) and mac(4)
sys kernel headers
tests kernel unit tests
ufs Unix File System - ffs(7)
vm virtual memory system
x86 code shared by AMD64 and i386 architectures