mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2025-01-20 11:35:19 +00:00
cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)
New microcode introduces the "Speculative Store Bypass Disable" CPUID feature bit. This needs to be exposed to guest OS to allow them to protect against CVE-2018-3639. Signed-off-by: Daniel P. Berrangé <berrange@redhat.com> Reviewed-by: Jiri Denemark <jdenemar@redhat.com> (cherry picked from commit 1dbca2eccad58d91a5fd33962854f1a653638182)
This commit is contained in:
parent
13969ca54f
commit
519a6adb13
@ -298,6 +298,9 @@
|
|||||||
<feature name='spec-ctrl'>
|
<feature name='spec-ctrl'>
|
||||||
<cpuid eax_in='0x07' ecx_in='0x00' edx='0x04000000'/>
|
<cpuid eax_in='0x07' ecx_in='0x00' edx='0x04000000'/>
|
||||||
</feature>
|
</feature>
|
||||||
|
<feature name='ssbd'>
|
||||||
|
<cpuid eax_in='0x07' ecx_in='0x00' edx='0x80000000'/>
|
||||||
|
</feature>
|
||||||
|
|
||||||
<!-- Processor Extended State Enumeration sub leaf 1 -->
|
<!-- Processor Extended State Enumeration sub leaf 1 -->
|
||||||
<feature name='xsaveopt'>
|
<feature name='xsaveopt'>
|
||||||
|
Loading…
x
Reference in New Issue
Block a user