]> git.ipfire.org Git - thirdparty/qemu.git/commit
i386: Define the Virt SSBD MSR and handling of it (CVE-2018-3639)
authorKonrad Rzeszutek Wilk <konrad.wilk@oracle.com>
Mon, 21 May 2018 21:54:24 +0000 (22:54 +0100)
committerMichael Roth <mdroth@linux.vnet.ibm.com>
Thu, 21 Jun 2018 01:45:07 +0000 (20:45 -0500)
commit73521f60f4ecb48d168021b193fe2e52fb0eea9a
treecb104bd456567a0b6f4a296bbbbab3d0dc63a24e
parent4ce0b750a20a055736b073fa7dff3eba6f6e3b73
i386: Define the Virt SSBD MSR and handling of it (CVE-2018-3639)

"Some AMD processors only support a non-architectural means of enabling
speculative store bypass disable (SSBD).  To allow a simplified view of
this to a guest, an architectural definition has been created through a new
CPUID bit, 0x80000008_EBX[25], and a new MSR, 0xc001011f.  With this, a
hypervisor can virtualize the existence of this definition and provide an
architectural method for using SSBD to a guest.

Add the new CPUID feature, the new MSR and update the existing SSBD
support to use this MSR when present." (from x86/speculation: Add virtualized
speculative store bypass disable support in Linux).

Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
Message-Id: <20180521215424.13520-4-berrange@redhat.com>
Signed-off-by: Eduardo Habkost <ehabkost@redhat.com>
(cherry picked from commit cfeea0c021db6234c154dbc723730e81553924ff)
 Conflicts:
target/i386/kvm.c
target/i386/machine.c
* drop context dep on b77146e9a
Signed-off-by: Michael Roth <mdroth@linux.vnet.ibm.com>
target/i386/cpu.h
target/i386/kvm.c
target/i386/machine.c