]> xenbits.xensource.com Git - xen.git/commit
x86/spec-ctrl: Wire up the Native-BHI software sequences
authorAndrew Cooper <andrew.cooper3@citrix.com>
Thu, 8 Jun 2023 18:41:44 +0000 (19:41 +0100)
committerAndrew Cooper <andrew.cooper3@citrix.com>
Tue, 9 Apr 2024 16:10:28 +0000 (17:10 +0100)
commit27f9a778bd2538f06d02fd79f3381ff0a27f4987
tree84374bc5bc011864b4a3b745c2a75d5e76ba88d3
parent4e7d75c4a5e841cec840010edbc6dfcf3c8a7b61
x86/spec-ctrl: Wire up the Native-BHI software sequences

In the absence of BHI_DIS_S, mitigating Native-BHI requires the use of a
software sequence.

Introduce a new bhb-seq= option to select between avaialble sequences and
bhb-entry= to control the per-PV/HVM actions like we have for other blocks.

Activate the short sequence by default for PV and HVM guests on affected
hardware if BHI_DIS_S isn't present.

This is part of XSA-456 / CVE-2024-2201.

Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
Acked-by: Roger Pau Monné <roger.pau@citrix.com>
(cherry picked from commit 689ad48ce9cf4c38297cd126e7e003a1c13a3b9d)
docs/misc/xen-command-line.pandoc
xen/arch/x86/spec_ctrl.c