From 3cea2c36571b39a6fa956abe66507c04283ad614 Mon Sep 17 00:00:00 2001 From: Pawan Gupta Date: Mon, 14 Aug 2023 21:54:27 -0700 Subject: [PATCH] target/i386: Export GDS_NO bit to guests commit 3a2a1f97ea349745094e789e6b0768dbd92d0dcd upstream. Gather Data Sampling (GDS) is a side-channel attack using Gather instructions. Some Intel processors will set ARCH_CAP_GDS_NO bit in MSR IA32_ARCH_CAPABILITIES to report that they are not vulnerable to GDS. Make this bit available to guests. Intel-SIG: commit 3a2a1f97ea34 ("target/i386: Export GDS_NO bit to guests") Backport to export GDS_NO bit to guests(CVE-2022-40982). Closes: https://lore.kernel.org/qemu-devel/CAMGffEmG6TNq0n3+4OJAgXc8J0OevY60KHZekXCBs3LoK9vehA@mail.gmail.com/ Reported-by: Jack Wang Signed-off-by: Pawan Gupta Tested-by: Jack Wang Tested-by: Daniel Sneddon Message-ID: Signed-off-by: Paolo Bonzini [ Aichun Shi: amend commit log ] Signed-off-by: Aichun Shi --- target/i386/cpu.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/target/i386/cpu.c b/target/i386/cpu.c index eb911b12fa..58124071da 100644 --- a/target/i386/cpu.c +++ b/target/i386/cpu.c @@ -1004,7 +1004,7 @@ FeatureWordInfo feature_word_info[FEATURE_WORDS] = { NULL, "sbdr-ssdp-no", "fbsdp-no", "psdp-no", NULL, "fb-clear", NULL, NULL, NULL, NULL, NULL, NULL, - "pbrsb-no", NULL, NULL, NULL, + "pbrsb-no", NULL, "gds-no", NULL, NULL, NULL, NULL, NULL, }, .msr = { -- 2.27.0