diff options
| author |   Pawan Gupta <pawan.kumar.gupta@linux.intel.com> | 2022-05-19 20:33:13 -0700 |
|---|---|---|
| committer |   Borislav Petkov <bp@suse.de> | 2022-05-21 12:36:07 +0200 |
| commit | 22cac9c677c95f3ac5c9244f8ca0afdc7c8afb19 (patch) | |
| tree | 583a81e97c6eb4c7a7f8f8b27ea1315a4f6a15af /arch/x86/kernel/cpu/common.c | |
| parent | x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (diff) | |
| download | linux-dev-22cac9c677c95f3ac5c9244f8ca0afdc7c8afb19.tar.xz linux-dev-22cac9c677c95f3ac5c9244f8ca0afdc7c8afb19.zip | |
x86/speculation/srbds: Update SRBDS mitigation selection
Currently, Linux disables SRBDS mitigation on CPUs not affected by
MDS and have the TSX feature disabled. On such CPUs, secrets cannot
be extracted from CPU fill buffers using MDS or TAA. Without SRBDS
mitigation, Processor MMIO Stale Data vulnerabilities can be used to
extract RDRAND, RDSEED, and EGETKEY data.
Do not disable SRBDS mitigation by default when CPU is also affected by
Processor MMIO Stale Data vulnerabilities.
Signed-off-by: Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
Signed-off-by: Borislav Petkov <bp@suse.de>
Diffstat (limited to '')
0 files changed, 0 insertions, 0 deletions