[Backport] RISC-V User CFI (Control Flow Integrity) Support#261

Open

zhuzhenxxx-collab wants to merge 47 commits into

RVCK-Project:rvck-6.6from

zhuzhenxxx-collab:feat/cfi

Commits on May 20, 2026

riscv: signal: abstract header saving for setup_sigcontext

AndybnACT
authored and
ZhenXing Zhu
committed
mm: add VM_SHADOW_STACK definition for riscv

deepak0414
authored and
ZhenXing Zhu
committed
dt-bindings: riscv: document zicfilp and zicfiss in extensions.yaml

deepak0414
authored and
ZhenXing Zhu
committed
riscv: zicfiss / zicfilp enumeration

deepak0414
authored and
ZhenXing Zhu
committed
riscv: add Zicfiss / Zicfilp extension CSR and bit definitions

deepak0414
authored and
ZhenXing Zhu
committed
riscv: Add usercfi state for task and save/restore of CSR_SSP on trap entry/exit

deepak0414
authored and
ZhenXing Zhu
committed
riscv/mm: ensure PROT_WRITE leads to VM_READ | VM_WRITE

deepak0414
authored and
ZhenXing Zhu
committed
riscv/mm: manufacture shadow stack ptes

deepak0414
authored and
ZhenXing Zhu
committed
riscv/mm: teach pte_mkwrite to manufacture shadow stack PTEs

deepak0414
authored and
ZhenXing Zhu
committed
riscv/mm: update write protect to work on shadow stacks

deepak0414
authored and
ZhenXing Zhu
committed
riscv/mm: Implement map_shadow_stack() syscall

deepak0414
authored and
ZhenXing Zhu
committed
riscv/shstk: If needed allocate a new shadow stack on clone

deepak0414
authored and
ZhenXing Zhu
committed
riscv: Implement arch-agnostic shadow stack prctls

deepak0414
authored and
ZhenXing Zhu
committed
prctl: arch-agnostic prctl for shadow stack

broonie
authored and
ZhenXing Zhu
committed
mman: Add map_shadow_stack() flags

broonie
authored and
ZhenXing Zhu
committed
prctl: add arch-agnostic prctl()s for indirect branch tracking

deepak0414
authored and
ZhenXing Zhu
committed
riscv: Implement indirect branch tracking prctls

deepak0414
authored and
ZhenXing Zhu
committed
riscv/traps: Introduce software check exception and uprobe handling

deepak0414
authored and
ZhenXing Zhu
committed
riscv/signal: save and restore the shadow stack on a signal

deepak0414
authored and
ZhenXing Zhu
committed
riscv/kernel: update __show_regs() to print shadow stack register

deepak0414
authored and
ZhenXing Zhu
committed
riscv/ptrace: expose riscv CFI status and state via ptrace and in core files

deepak0414
authored and
ZhenXing Zhu
committed
riscv: hwprobe: add support for RISCV_HWPROBE_KEY_IMA_EXT_1

Paul Walmsley
authored and
ZhenXing Zhu
committed
riscv/hwprobe: add zicfilp / zicfiss enumeration in hwprobe

deepak0414
authored and
ZhenXing Zhu
committed
riscv: add kernel command line option to opt out of user CFI

deepak0414
authored and
ZhenXing Zhu
committed
riscv: enable kernel access to shadow stack memory via the FWFT SBI call

deepak0414
authored and
ZhenXing Zhu
committed
riscv: Check that vdso does not contain any dynamic relocations

Alexandre Ghiti
authored and
ZhenXing Zhu
committed
random: vDSO: add missing c-getrandom-y in Makefile

chleroy
authored and
ZhenXing Zhu
committed
RISC-V: vDSO: Wire up getrandom() vDSO implementation

xry111
authored and
ZhenXing Zhu
committed
arch/riscv: compile vdso with landing pad and shadow stack note

cwshu
authored and
ZhenXing Zhu
committed
arch/riscv: add dual vdso creation logic and select vdso based on hw

deepak0414
authored and
ZhenXing Zhu
committed
riscv: create a Kconfig fragment for shadow stack and landing pad support

deepak0414
authored and
ZhenXing Zhu
committed
riscv: add documentation for landing pad / indirect branch tracking

deepak0414
authored and
ZhenXing Zhu
committed
riscv: add documentation for shadow stack

deepak0414
authored and
ZhenXing Zhu
committed
kselftest/riscv: add kselftest for user mode CFI

deepak0414
authored and
ZhenXing Zhu
committed
riscv: use _BITUL macro rather than BIT() in ptrace uapi and kselftests

Paul Walmsley
authored and
ZhenXing Zhu
committed
riscv: ptrace: cfi: fix "PRACE" typo in uapi header

Paul Walmsley
authored and
ZhenXing Zhu
committed
riscv: ptrace: expand "LP" references to "branch landing pads" in uapi headers

Paul Walmsley
authored and
ZhenXing Zhu
committed
riscv: ptrace: cfi: expand "SS" references to "shadow stack" in uapi headers

Paul Walmsley
authored and
ZhenXing Zhu
committed
prctl: rename branch landing pad implementation functions to be more explicit

Paul Walmsley
authored and
ZhenXing Zhu
committed
prctl: cfi: change the branch landing pad prctl()s to be more descriptive

Paul Walmsley
authored and
ZhenXing Zhu
committed
riscv: cfi: clear CFI lock status in start_thread()

zongbox
authored and
ZhenXing Zhu
committed
selftests: riscv: Add license to cfi selftest

thecharlesjenkins
authored and
ZhenXing Zhu
committed
riscv: entry: Convert ret_from_fork() to C

charlie-rivos
authored and
ZhenXing Zhu
committed
riscv: entry: Split ret_from_fork() into user and kernel

charlie-rivos
authored and
ZhenXing Zhu
committed
riscv: hwprobe: do not produce frtace relocation

visaev-sc
authored and
ZhenXing Zhu
committed
arch: Reserve map_shadow_stack() syscall number for all architectures

sohilmeh
authored and
ZhenXing Zhu
committed
kbuild: use $(obj)/ instead of $(src)/ for common pattern rules

masahir0y
authored and
ZhenXing Zhu
committed