79c4324644
Change-Id: I2d302dda68298877c65c99147f5bf22186a59aac
47 lines
1.8 KiB
Diff
47 lines
1.8 KiB
Diff
From 3cea2c36571b39a6fa956abe66507c04283ad614 Mon Sep 17 00:00:00 2001
|
|
From: Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
|
|
Date: Mon, 14 Aug 2023 21:54:27 -0700
|
|
Subject: [PATCH] target/i386: Export GDS_NO bit to guests
|
|
|
|
commit 3a2a1f97ea349745094e789e6b0768dbd92d0dcd upstream.
|
|
|
|
Gather Data Sampling (GDS) is a side-channel attack using Gather
|
|
instructions. Some Intel processors will set ARCH_CAP_GDS_NO bit in
|
|
MSR IA32_ARCH_CAPABILITIES to report that they are not vulnerable to
|
|
GDS.
|
|
|
|
Make this bit available to guests.
|
|
|
|
Intel-SIG: commit 3a2a1f97ea34 ("target/i386: Export GDS_NO bit to guests")
|
|
Backport to export GDS_NO bit to guests(CVE-2022-40982).
|
|
|
|
Closes: https://lore.kernel.org/qemu-devel/CAMGffEmG6TNq0n3+4OJAgXc8J0OevY60KHZekXCBs3LoK9vehA@mail.gmail.com/
|
|
Reported-by: Jack Wang <jinpu.wang@ionos.com>
|
|
Signed-off-by: Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
|
|
Tested-by: Jack Wang <jinpu.wang@ionos.com>
|
|
Tested-by: Daniel Sneddon <daniel.sneddon@linux.intel.com>
|
|
Message-ID: <fde42d81ce454477ca8e27d5429a190b7366fe86.1692074650.git.pawan.kumar.gupta@linux.intel.com>
|
|
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
|
|
[ Aichun Shi: amend commit log ]
|
|
Signed-off-by: Aichun Shi <aichun.shi@intel.com>
|
|
---
|
|
target/i386/cpu.c | 2 +-
|
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
|
diff --git a/target/i386/cpu.c b/target/i386/cpu.c
|
|
index eb911b12fa..58124071da 100644
|
|
--- a/target/i386/cpu.c
|
|
+++ b/target/i386/cpu.c
|
|
@@ -1004,7 +1004,7 @@ FeatureWordInfo feature_word_info[FEATURE_WORDS] = {
|
|
NULL, "sbdr-ssdp-no", "fbsdp-no", "psdp-no",
|
|
NULL, "fb-clear", NULL, NULL,
|
|
NULL, NULL, NULL, NULL,
|
|
- "pbrsb-no", NULL, NULL, NULL,
|
|
+ "pbrsb-no", NULL, "gds-no", NULL,
|
|
NULL, NULL, NULL, NULL,
|
|
},
|
|
.msr = {
|
|
--
|
|
2.27.0
|
|
|