From: Linus Torvalds <torvalds@linux-foundation.org>
+commit 50896e180c6aa3a9c61a26ced99e15d602666a4c upstream.
+
If pages are swapped out, the swap entry is stored in the corresponding
PTE, which has the Present bit cleared. CPUs vulnerable to L1TF speculate
on PTE entries which have the present bit set and would treat the swap
From: Andi Kleen <ak@linux.intel.com>
+commit 50896e180c6aa3a9c61a26ced99e15d602666a4c upstream.
+
L1 Terminal Fault (L1TF) is a speculation related vulnerability. The CPU
speculates on PTE entries which do not have the PRESENT bit set, if the
content of the resulting physical address is available in the L1D cache.
From: Linus Torvalds <torvalds@linux-foundation.org>
+commit bcd11afa7adad8d720e7ba5ef58bdcd9775cf45f upstream.
+
With L1 terminal fault the CPU speculates into unmapped PTEs, and resulting
side effects allow to read the memory the PTE is pointing too, if its
values are still in the L1 cache.