]> xenbits.xensource.com Git - xen.git/commit
x86/spec-ctrl: Wire up the Native-BHI software sequences
authorAndrew Cooper <andrew.cooper3@citrix.com>
Thu, 8 Jun 2023 18:41:44 +0000 (19:41 +0100)
committerAndrew Cooper <andrew.cooper3@citrix.com>
Tue, 9 Apr 2024 15:37:30 +0000 (16:37 +0100)
commit689ad48ce9cf4c38297cd126e7e003a1c13a3b9d
treee72bd362f359d5db99216540fe7a785acf22bc57
parent954c983abceee97bf5f6230b9ae164f2c49a9aa9
x86/spec-ctrl: Wire up the Native-BHI software sequences

In the absence of BHI_DIS_S, mitigating Native-BHI requires the use of a
software sequence.

Introduce a new bhb-seq= option to select between avaialble sequences and
bhb-entry= to control the per-PV/HVM actions like we have for other blocks.

Activate the short sequence by default for PV and HVM guests on affected
hardware if BHI_DIS_S isn't present.

This is part of XSA-456 / CVE-2024-2201.

Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
Acked-by: Roger Pau Monné <roger.pau@citrix.com>
docs/misc/xen-command-line.pandoc
xen/arch/x86/spec_ctrl.c