qemu-devel.nongnu.org archive mirror
 help / color / mirror / Atom feed
* [Qemu-devel] [PATCH 0/7] CPU model updates for CVE-2017-5715 (Spectre variant #2)
@ 2018-01-09 15:45 Eduardo Habkost
  2018-01-09 15:45 ` [Qemu-devel] [PATCH 1/7] i386: Change X86CPUDefinition::model_id to const char* Eduardo Habkost
                   ` (9 more replies)
  0 siblings, 10 replies; 15+ messages in thread
From: Eduardo Habkost @ 2018-01-09 15:45 UTC (permalink / raw)
  To: qemu-devel; +Cc: Paolo Bonzini

This series adds support for the new IA32_SPEC_CTRL MSR on Intel
CPU models.  The new MSR and the spec-ctrl CPUID bit
(CPUID[EAX=7,ECX=0].EDX[bit 26]) were introduced by a recent
Intel microcode updated and can be used by OSes to mitigate
CVE-2017-5715.

It also adds a new EPYC-IBPB CPU model that includes
CPUID[0x80000008].EBX[bit 12] (IBPB).  That patch is a RFC
because I couldn't find any detailed info on the new CPUID bit
and the IA32_PRED_CMD MSR.

Additionally, the last patch on this series changes the new
Westmere-IBRS, SandyBridge-IBRS and IvyBridge-IBRS to include the
PCID feature, because PCID helps to reduce the performance impact
of KPTI on the guest.  The patch is also a RFC because we need to
confirm if all Westmere (and newer) CPUs out there have PCID
available.

References:
* https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5715
* Google Security Blog on Meltdown/Spectre mitigations:
  https://security.googleblog.com/2018/01/more-details-about-mitigations-for-cpu_4.html
* Kernel patches to make use of the new MSRs:
  https://www.mail-archive.com/linux-kernel@vger.kernel.org/msg1578798.html
* KVM kernel patches for the new CPUID bits and MSRs:
  https://www.mail-archive.com/linux-kernel@vger.kernel.org/msg1580363.html
* Patches adding PCID to the existing CPU models:
  https://patchew.org/QEMU/20180108205052.24385-1-vincent@bernat.im
  https://patchew.org/QEMU/20180109070112.30806-1-vincent@bernat.im

Eduardo Habkost (6):
  i386: Change X86CPUDefinition::model_id to const char*
  i386: Add spec-ctrl CPUID bit
  i386: Add FEAT_8000_0008_EBX CPUID feature word
  i386: Add new -IBRS versions of Intel CPU models
  [RFC] i386: Add EPYC-IBPB CPU model
  [RFC] i386: Add PCID to {Westmere,SandyBridge,IvyBridge}-IBRS

Paolo Bonzini (1):
  i386: Add support for SPEC_CTRL MSR

 target/i386/cpu.h     |   7 +
 target/i386/cpu.c     | 454 +++++++++++++++++++++++++++++++++++++++++++++++++-
 target/i386/kvm.c     |  14 ++
 target/i386/machine.c |  20 +++
 4 files changed, 491 insertions(+), 4 deletions(-)

-- 
2.14.3

^ permalink raw reply	[flat|nested] 15+ messages in thread

end of thread, other threads:[~2018-01-16 14:50 UTC | newest]

Thread overview: 15+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2018-01-09 15:45 [Qemu-devel] [PATCH 0/7] CPU model updates for CVE-2017-5715 (Spectre variant #2) Eduardo Habkost
2018-01-09 15:45 ` [Qemu-devel] [PATCH 1/7] i386: Change X86CPUDefinition::model_id to const char* Eduardo Habkost
2018-01-09 17:47   ` [Qemu-devel] [PATCH] fixup! " Eduardo Habkost
2018-01-09 15:45 ` [Qemu-devel] [PATCH 2/7] i386: Add support for SPEC_CTRL MSR Eduardo Habkost
2018-01-09 15:45 ` [Qemu-devel] [PATCH 3/7] i386: Add spec-ctrl CPUID bit Eduardo Habkost
2018-01-13  3:04   ` Gonglei (Arei)
2018-01-15 12:23     ` Eduardo Habkost
2018-01-16 14:50       ` Gonglei (Arei)
2018-01-09 15:45 ` [Qemu-devel] [PATCH 4/7] i386: Add FEAT_8000_0008_EBX CPUID feature word Eduardo Habkost
2018-01-09 15:45 ` [Qemu-devel] [PATCH 5/7] i386: Add new -IBRS versions of Intel CPU models Eduardo Habkost
2018-01-09 15:45 ` [Qemu-devel] [PATCH 6/7] [RFC] i386: Add EPYC-IBPB CPU model Eduardo Habkost
2018-01-09 15:45 ` [Qemu-devel] [PATCH 7/7] [RFC] i386: Add PCID to {Westmere, SandyBridge, IvyBridge}-IBRS Eduardo Habkost
2018-01-09 16:01 ` [Qemu-devel] [PATCH 0/7] CPU model updates for CVE-2017-5715 (Spectre variant #2) no-reply
2018-01-12 19:50 ` Eduardo Habkost
2018-01-15 12:27 ` Eduardo Habkost

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).