90057151bb
- s390x/sclp: Simplify get_sclp_device() - target/ppc: Remove msr_pr macro - docs/system/target-arm: Re-alphabetize board list - migration: Extend query-migrate to provide dirty page limit info - migration: Implement dirty-limit convergence algo - migration: Put the detection logic before auto-converge checking - migration: Refactor auto-converge capability logic - migration: Introduce dirty-limit capability - qapi/migration: Introduce vcpu-dirty-limit parameters - qapi/migration: Introduce x-vcpu-dirty-limit-period parameter - Change the value of no_ged from true to false - Allow UNIX socket option for VNC websocket - tpm_emulator: Avoid double initialization during - chardev/char-socket: Update AF_UNIX for Windows - KVM: dirty ring: add missing memory barrier - i386: reset KVM nested state upon CPU reset - esp: Handle CMD_BUSRESET by resetting the SCSI bus - dbus-vmstate: Restrict error checks to registered proxies in dbus_get_proxies - vfio/pci: Add Ascend310b scend910b support - target/i386: Export RFDS bit to guests - target/i386: Add new CPU model SierraForest - target/i386: Introduce Icelake-Server-v7 to enable TSX - hw/virtio: handle un-configured shutdown in virtio-pci - target/s390x: display deprecation status in '-cpu help' - target/i386: display deprecation status in '-cpu help' - pc-bios/s390-ccw: Fix booting with logical block size < physical block size Signed-off-by: Jiabo Feng <fengjiabo1@huawei.com>
48 lines
1.8 KiB
Diff
48 lines
1.8 KiB
Diff
From 2ddb661f2566d8835103c0beedf24e36adc2608d Mon Sep 17 00:00:00 2001
|
|
From: Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
|
|
Date: Wed, 13 Mar 2024 07:53:23 -0700
|
|
Subject: [PATCH] target/i386: Export RFDS bit to guests
|
|
|
|
commit 41bdd9812863c150284a9339a048ed88c40f4df7 upstream.
|
|
|
|
Register File Data Sampling (RFDS) is a CPU side-channel vulnerability
|
|
that may expose stale register value. CPUs that set RFDS_NO bit in MSR
|
|
IA32_ARCH_CAPABILITIES indicate that they are not vulnerable to RFDS.
|
|
Similarly, RFDS_CLEAR indicates that CPU is affected by RFDS, and has
|
|
the microcode to help mitigate RFDS.
|
|
|
|
Make RFDS_CLEAR and RFDS_NO bits available to guests.
|
|
|
|
Intel-SIG: commit 41bdd9812863 target/i386: Export RFDS bit to guests.
|
|
6.2.0-Add SRF CPU module support
|
|
|
|
Signed-off-by: Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
|
|
Reviewed-by: Xiaoyao Li <xiaoyao.li@intel.com>
|
|
Reviewed-by: Zhao Liu <zhao1.liu@intel.com>
|
|
Message-ID: <9a38877857392b5c2deae7e7db1b170d15510314.1710341348.git.pawan.kumar.gupta@linux.intel.com>
|
|
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
|
|
[ Quanxian Wang: amend commit log ]
|
|
Signed-off-by: Quanxian Wang <quanxian.wang@intel.com>
|
|
---
|
|
target/i386/cpu.c | 4 ++--
|
|
1 file changed, 2 insertions(+), 2 deletions(-)
|
|
|
|
diff --git a/target/i386/cpu.c b/target/i386/cpu.c
|
|
index eb7fda0299..a11f3373ea 100644
|
|
--- a/target/i386/cpu.c
|
|
+++ b/target/i386/cpu.c
|
|
@@ -1052,8 +1052,8 @@ FeatureWordInfo feature_word_info[FEATURE_WORDS] = {
|
|
NULL, "sbdr-ssdp-no", "fbsdp-no", "psdp-no",
|
|
NULL, "fb-clear", NULL, NULL,
|
|
NULL, NULL, NULL, NULL,
|
|
- "pbrsb-no", NULL, "gds-no", NULL,
|
|
- NULL, NULL, NULL, NULL,
|
|
+ "pbrsb-no", NULL, "gds-no", "rfds-no",
|
|
+ "rfds-clear", NULL, NULL, NULL,
|
|
},
|
|
.msr = {
|
|
.index = MSR_IA32_ARCH_CAPABILITIES,
|
|
--
|
|
2.27.0
|
|
|