aeec8d
From b76070b36f9952421488fbf5a15f470c53e1c136 Mon Sep 17 00:00:00 2001
aeec8d
Message-Id: <b76070b36f9952421488fbf5a15f470c53e1c136@dist-git>
aeec8d
From: Jiri Denemark <jdenemar@redhat.com>
aeec8d
Date: Fri, 13 Dec 2019 14:28:07 +0100
aeec8d
Subject: [PATCH] cpu_map: Add TAA_NO bit for IA32_ARCH_CAPABILITIES MSR
aeec8d
MIME-Version: 1.0
aeec8d
Content-Type: text/plain; charset=UTF-8
aeec8d
Content-Transfer-Encoding: 8bit
aeec8d
aeec8d
CVE-2019-11135
aeec8d
aeec8d
CPUs with TAA_NO bit of IA32_ARCH_CAPABILITIES MSR set to 1 are not
aeec8d
vulnerable to TSX Asynchronous Abort and passing this bit to a guest
aeec8d
may avoid unnecessary mitigations.
aeec8d
aeec8d
Signed-off-by: Jiri Denemark <jdenemar@redhat.com>
aeec8d
Reviewed-by: Ján Tomko <jtomko@redhat.com>
aeec8d
(cherry picked from commit 07aaced4e6ea6db8b27f44636f51cafa6f1847a8)
aeec8d
aeec8d
Conflicts:
aeec8d
	src/cpu_map/x86_features.xml
aeec8d
            - cpu_map is still monolithic downstream
aeec8d
aeec8d
Signed-off-by: Jiri Denemark <jdenemar@redhat.com>
aeec8d
Message-Id: <0ff574a85f1cc7b53140d41a6a62254bea08a06f.1576243094.git.jdenemar@redhat.com>
aeec8d
Reviewed-by: Ján Tomko <jtomko@redhat.com>
aeec8d
---
aeec8d
 src/cpu/cpu_map.xml | 3 +++
aeec8d
 1 file changed, 3 insertions(+)
aeec8d
aeec8d
diff --git a/src/cpu/cpu_map.xml b/src/cpu/cpu_map.xml
aeec8d
index 7b9f8bb452..c2b3fca47a 100644
aeec8d
--- a/src/cpu/cpu_map.xml
aeec8d
+++ b/src/cpu/cpu_map.xml
aeec8d
@@ -501,6 +501,9 @@
aeec8d
     <feature name='mds-no'>
aeec8d
       <msr index='0x10a' edx='0x00000000' eax='0x00000020'/>
aeec8d
     </feature>
aeec8d
+    <feature name='taa-no'>
aeec8d
+      <msr index='0x10a' edx='0x00000000' eax='0x00000100'/>
aeec8d
+    </feature>
aeec8d
 
aeec8d
     
aeec8d
     <model name='486'>
aeec8d
-- 
aeec8d
2.24.0
aeec8d