|
 |
357786 |
From a075f54393d3a00554855b938f3adfd7aaafec76 Mon Sep 17 00:00:00 2001
|
|
|
357786 |
From: Eduardo Habkost <ehabkost@redhat.com>
|
|
|
357786 |
Date: Thu, 30 Aug 2018 14:18:05 +0200
|
|
|
357786 |
Subject: [PATCH 06/29] i386: define the 'ssbd' CPUID feature bit
|
|
|
357786 |
(CVE-2018-3639)
|
|
|
357786 |
MIME-Version: 1.0
|
|
|
357786 |
Content-Type: text/plain; charset=UTF-8
|
|
|
357786 |
Content-Transfer-Encoding: 8bit
|
|
|
357786 |
|
|
|
357786 |
RH-Author: Eduardo Habkost <ehabkost@redhat.com>
|
|
|
357786 |
Message-id: <20180830141805.6667-2-ehabkost@redhat.com>
|
|
|
357786 |
Patchwork-id: 81977
|
|
|
357786 |
O-Subject: [RHEL-7.6 qemu-kvm-rhev PATCH 1/1] i386: define the 'ssbd' CPUID feature bit (CVE-2018-3639)
|
|
|
357786 |
Bugzilla: 1574216
|
|
|
357786 |
RH-Acked-by: Dr. David Alan Gilbert <dgilbert@redhat.com>
|
|
|
357786 |
RH-Acked-by: Igor Mammedov <imammedo@redhat.com>
|
|
|
357786 |
RH-Acked-by: Daniel P. Berrange <berrange@redhat.com>
|
|
|
357786 |
|
|
|
357786 |
From: Daniel P. Berrangé <berrange@redhat.com>
|
|
|
357786 |
|
|
|
357786 |
New microcode introduces the "Speculative Store Bypass Disable"
|
|
|
357786 |
CPUID feature bit. This needs to be exposed to guest OS to allow
|
|
|
357786 |
them to protect against CVE-2018-3639.
|
|
|
357786 |
|
|
|
357786 |
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
|
|
|
357786 |
Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
|
|
|
357786 |
Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
|
|
|
357786 |
Message-Id: <20180521215424.13520-2-berrange@redhat.com>
|
|
|
357786 |
Signed-off-by: Eduardo Habkost <ehabkost@redhat.com>
|
|
|
357786 |
(cherry picked from commit d19d1f965904a533998739698020ff4ee8a103da)
|
|
|
357786 |
Signed-off-by: Eduardo Habkost <ehabkost@redhat.com>
|
|
|
357786 |
Signed-off-by: Miroslav Rezanina <mrezanin@redhat.com>
|
|
|
357786 |
---
|
|
|
357786 |
target/i386/cpu.c | 2 +-
|
|
|
357786 |
target/i386/cpu.h | 1 +
|
|
|
357786 |
2 files changed, 2 insertions(+), 1 deletion(-)
|
|
|
357786 |
|
|
|
357786 |
diff --git a/target/i386/cpu.c b/target/i386/cpu.c
|
|
|
357786 |
index e6ad66c..e317aaf 100644
|
|
|
357786 |
--- a/target/i386/cpu.c
|
|
|
357786 |
+++ b/target/i386/cpu.c
|
|
|
357786 |
@@ -1008,7 +1008,7 @@ static FeatureWordInfo feature_word_info[FEATURE_WORDS] = {
|
|
|
357786 |
NULL, NULL, NULL, NULL,
|
|
|
357786 |
NULL, NULL, NULL, NULL,
|
|
|
357786 |
NULL, NULL, "spec-ctrl", NULL,
|
|
|
357786 |
- NULL, NULL, NULL, NULL,
|
|
|
357786 |
+ NULL, NULL, NULL, "ssbd",
|
|
|
357786 |
},
|
|
|
357786 |
.cpuid_eax = 7,
|
|
|
357786 |
.cpuid_needs_ecx = true, .cpuid_ecx = 0,
|
|
|
357786 |
diff --git a/target/i386/cpu.h b/target/i386/cpu.h
|
|
|
357786 |
index c80c461..75cf5ed 100644
|
|
|
357786 |
--- a/target/i386/cpu.h
|
|
|
357786 |
+++ b/target/i386/cpu.h
|
|
|
357786 |
@@ -686,6 +686,7 @@ typedef uint32_t FeatureWordArray[FEATURE_WORDS];
|
|
|
357786 |
#define CPUID_7_0_EDX_AVX512_4VNNIW (1U << 2) /* AVX512 Neural Network Instructions */
|
|
|
357786 |
#define CPUID_7_0_EDX_AVX512_4FMAPS (1U << 3) /* AVX512 Multiply Accumulation Single Precision */
|
|
|
357786 |
#define CPUID_7_0_EDX_SPEC_CTRL (1U << 26) /* Speculation Control */
|
|
|
357786 |
+#define CPUID_7_0_EDX_SPEC_CTRL_SSBD (1U << 31) /* Speculative Store Bypass Disable */
|
|
|
357786 |
|
|
|
357786 |
#define KVM_HINTS_DEDICATED (1U << 0)
|
|
|
357786 |
|
|
|
357786 |
--
|
|
|
357786 |
1.8.3.1
|
|
|
357786 |
|